Snort mailing list archives
listing daq-vars and confirming the cluster type of pfring
From: Charlie Dyer <charlierwdyer () gmail com>
Date: Fri, 12 May 2017 14:25:39 +0100
Hello list Could someone tell me if there is a way of listing all the variables you can pass to the daq-vars option? I've tried looking in various header files but can't find anything. The reason I ask is to confirm what type of clustering pf_ring is using and whether you can tell it to use one type or the other. As I understand it from reading the pfring code, the type is either round-robin (the default) or flow-5-tuple, how can I tell snort/pfring/daq to use flow-5-tuple? It would be good to understand what all the daq-var variable are and what they do/how they affect snort. Many thanks in advance Charles ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- listing daq-vars and confirming the cluster type of pfring Charlie Dyer (May 12)
- Re: listing daq-vars and confirming the cluster type of pfring Michael Altizer (May 29)