Home page logo
/

snort logo Snort mailing list archives

[PATCH] Add TX_RING support to AFPacket DAQ module
From: Michael Altizer <xiche () verizon net>
Date: Tue, 02 Nov 2010 23:15:25 -0400

If anyone is feeling adventurous or is already running Snort with the AFPacket module in inline mode, I've attached a patch against daq-0.3 which adds support for the PACKET_TX_RING feature found in Linux kernels 2.6.31 and later. It uses a memory mapped ring buffer to send packets and should (in theory) provide a decent inline performance boost over the previous implementation in the AFPacket DAQ module. This change seems to be relatively stable as I have been running it for the past week without any issues.

-Michael

Attachment: afpacket-v5.diff
Description:

------------------------------------------------------------------------------
Achieve Improved Network Security with IP and DNS Reputation.
Defend against bad network traffic, including botnets, malware, 
phishing sites, and compromised hosts - saving your company time, 
money, and embarrassment.   Learn More! 
http://p.sf.net/sfu/hpdev2dev-nov
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

  By Date           By Thread  

Current thread:
  • [PATCH] Add TX_RING support to AFPacket DAQ module Michael Altizer (Nov 03)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault