Open Information Security Foundation

10/03/2017

12:47 PM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

BTW even for receive checksum offloads, you can use the PACKET_AUXDATA socket option on AF_PACKET sockets, and look a... Bhavesh Davda

12:42 PM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

I'm not sure what "fake packets" v/s "real packets" means. The packets that suricata will see over the AF_PACKET inte... Bhavesh Davda

11:26 AM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

Please let me know if you agree with the proposed patches, or if I should make any changes.
I'm contemplating also... Bhavesh Davda

10/02/2017

12:45 PM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

Victor Julien wrote:
> I'm not sure why I added TSO, or if it is necessary. I guess my thinking was that when captur... Bhavesh Davda

11:41 AM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

Turns out TSO needs SG (as do receive side offloads), but SG is a leaf-level feature (i.e. SG doesn't depend on anyth... Bhavesh Davda

09/29/2017

04:55 PM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

Eric Leblond wrote:
> In your test, you are testing the local stack not Suricata. In most cases, suricata is handlin... Bhavesh Davda

03:45 PM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

Proposed patch. Just to see if this is the right way to go about doing this. Bhavesh Davda

03:29 PM Suricata Optimization #2218: Leave TSO enabled for Linux AF_PACKET runmode

Test is iperf3:
Server:
iperf3 --server --port 20001
Client (running Suricata):
iperf3 -c <server-IPv4> -p 20... Bhavesh Davda

02:35 PM Suricata Optimization #2218 (Closed): Leave TSO enabled for Linux AF_PACKET runmode

Not sure why Suricata choses to disable all NIC offloads by default on Linux, and spews out a nasty/scary warning in ... Bhavesh Davda