Project

General

Profile

Actions
Copy link

Bug #8780

open
AB

AF_XDP: bugfixes for AF_XDP capture

Bug #8780: AF_XDP: bugfixes for AF_XDP capture

Added by Amir Boussejra about 3 hours ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
TBD
Affected Versions:
8.0.6
Effort:
Difficulty:
Label:

Description

Series of fixes for AF_XDP capture mode, tested on suricata 8.0.6 base:

- WriteLinuxTunables fails when interface altname is used. Tunables were written using the name from suricata.yaml verbatim; when an altname is configured, the sysfs path does not exist. Added a commit to resolve the real netdev name before writing tunables.
- XSK creation broken with 2 capture interfaces. Socket setup logic failed when two interfaces were configured for capture; fixed XSK creation path so multi-interface capture works.
- Added XSK visibility about drops in stats.log. For diagnosing capture issues.
- UMEM size not configurable. UMEM was hardcoded; added sizing option to the af-xdp section of suricata.yaml.

No data to display

Actions
Copy link

Also available in: PDF Atom