Re: Turbo patch/PACKET_RX_RING with 2.4.x kernels

[Phil Wood <cpw () lanl gov>]

2.6 kernel does not appear to support the 2.4 ring buffer stuff.  I have
not done any further testing to find out why. 

2.4 should compile with CONFIG_FILTER and CONFIG_PACKET support in the
kernel.  One thing you need to do is change /usr/include/linux and 
/usr/include/asm to be sym links as follow to your linux source tree.
Something like:

# ls -ld /usr/include/linux
lrwxrwxrwx    1 root     root           28 May 28 14:03 /usr/include/linux -> /usr/src/linux/include/linux
# ls -ld /usr/include/asm
lrwxrwxrwx    1 root     root           31 May 28 13:38 /usr/include/asm -> /usr/src/linux/include/asm-i386

And then run ./configure ... options ...

My recommendation is to stick with 2.4.  I'm thinking that the 2.6 test
kernel is still not ready for prime time.

On Sat, Nov 08, 2003 at 01:12:32AM -0800, Scott Zawalski wrote:
> I recently upgraded my kernel from a Redhat recompiled kernel to a 
> kernel I compiled myself. I now no longer have PACKET_RX_RING support. I 
> have read the READ ME.linux as many times as possible :) I have both 
> CONFIG_FILTER and CONFIG_PACKET selected. I could not find a turbo patch 
> for any 2.4 kernels so I assumed it was incorporated. Any help would be 
> greatly appreciated.
>
> Also would a 2.6 kernel possibly boost performance or is that not worth 
> it? 2.2 maybe?
>
> I am using the E1000 driver and I read something about hacked drivers 
> lowering packet loss I only found drivers though for 2.2 kernels. Do 
> most of you guys run with the current 2.4 stable or do you go for the 
> 2.2 kernel?
>
> Thank you,
> Scott
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: ApacheCon 2003,
> 16-19 November in Las Vegas. Learn firsthand the latest
> developments in Apache, PHP, Perl, XML, Java, MySQL,
> WebDAV, and more! http://www.apachecon.com/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
Phil Wood (cpw_at_lanl.gov)


-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users