[Bro-Dev] Running bro with newer 10 GigE cards that Coalesce packeets in the hardware

[Seth Hall]

On May 8, 2011, at 10:11 PM, William Jones wrote:

> This takes many packets and presents them to bro as one very large packet 10K.  
> Can anyone think of any down side to running bro with packet coalescing nic's.    


I think I'm lost.  At first I thought you were talking about interrupt coalescing (which shouldn't cause any changes), but now I'm not so sure.  Can you point me to documentation for your packet coalescing NIC and the setting you're changing in your operating system to enable it?

Thanks,
  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/