[Snort-devel] [PATCH] Add TX_RING support to AFPacket DAQ module

Michael Altizer xiche at ...1778...
Tue Nov 2 23:15:25 EDT 2010


If anyone is feeling adventurous or is already running Snort with the 
AFPacket module in inline mode, I've attached a patch against daq-0.3 
which adds support for the PACKET_TX_RING feature found in Linux kernels 
2.6.31 and later.  It uses a memory mapped ring buffer to send packets 
and should (in theory) provide a decent inline performance boost over 
the previous implementation in the AFPacket DAQ module.  This change 
seems to be relatively stable as I have been running it for the past 
week without any issues.

-Michael
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: afpacket-v5.diff
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20101102/ccc5bbbe/attachment.ksh>


More information about the Snort-devel mailing list