Suricata

Suricata attempts to disable offloads on startup as needed, however this won't work in many virtual environments where the offloads need to be disable on the host OS, but we don't appear to document these well, but I believe its covered in some training material.

We should have a section that documents these offloads better that we can point users to.

For example, I have this script I've carried around me, but don't know what is necessary from it:

#! /bin/sh

IF=$1

off=${OFF:-off}

ethtool -K ${IF} tso ${off}
ethtool -K ${IF} gro ${off}
ethtool -K ${IF} lro ${off}
ethtool -K ${IF} gso ${off}
ethtool -K ${IF} rx ${off}
ethtool -K ${IF} tx ${off}
ethtool -K ${IF} sg ${off}
ethtool -K ${IF} rxvlan ${off}
ethtool -K ${IF} txvlan ${off}