[Snort-devel] [PATCH] Add TX_RING support to AFPacket DAQ module
xiche at ...1778...
Tue Nov 2 23:15:25 EDT 2010
If anyone is feeling adventurous or is already running Snort with the
AFPacket module in inline mode, I've attached a patch against daq-0.3
which adds support for the PACKET_TX_RING feature found in Linux kernels
2.6.31 and later. It uses a memory mapped ring buffer to send packets
and should (in theory) provide a decent inline performance boost over
the previous implementation in the AFPacket DAQ module. This change
seems to be relatively stable as I have been running it for the past
week without any issues.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
More information about the Snort-devel