[Zeek] af_packet vs pfring

Edgmand, Craig craig.edgmand at okstate.edu
Fri Nov 22 06:39:05 PST 2019


If your kernel supports it you should use af_packet.  It is built in and pf_ring is a giant pain in the ass.  ☺


From: zeek-bounces at zeek.org <zeek-bounces at zeek.org> On Behalf Of venkatesh bandari
Sent: Friday, November 22, 2019 8:14 AM
To: zeek <zeek at zeek.org>
Subject: [Zeek] af_packet vs pfring

**External Email - Please verify sender email address before responding.**
Hello team,

could anyone share ideas/thoughts which one to use either pf_ring or af_packet to load balance.

any recommendations.

Thanks
Venkatesh

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191122/3cdcf5b8/attachment-0001.html 


More information about the Zeek mailing list