Snort mailing list archives
[PATCH] Add TX_RING support to AFPacket DAQ module
From: Michael Altizer <xiche () verizon net>
Date: Tue, 02 Nov 2010 23:15:25 -0400
If anyone is feeling adventurous or is already running Snort with the AFPacket module in inline mode, I've attached a patch against daq-0.3 which adds support for the PACKET_TX_RING feature found in Linux kernels 2.6.31 and later. It uses a memory mapped ring buffer to send packets and should (in theory) provide a decent inline performance boost over the previous implementation in the AFPacket DAQ module. This change seems to be relatively stable as I have been running it for the past week without any issues.
-Michael
Attachment:
afpacket-v5.diff
Description:
------------------------------------------------------------------------------ Achieve Improved Network Security with IP and DNS Reputation. Defend against bad network traffic, including botnets, malware, phishing sites, and compromised hosts - saving your company time, money, and embarrassment. Learn More! http://p.sf.net/sfu/hpdev2dev-nov
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
Current thread:
- [PATCH] Add TX_RING support to AFPacket DAQ module Michael Altizer (Nov 02)
