Project

General

Profile

Actions

Feature #681

closed

Implement TPACKET_V3 support in AF_PACKET

Added by Eric Leblond about 12 years ago. Updated over 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Suricata only supports TPACKET_V2 in AF_PACKET capture. The version 3 of packet allows to have a non fixed packet size in the ring buffer. This is supposed to increase capture performance on network with small packets.

Actions

Also available in: Atom PDF