[Zeek] Zeek and myricom NICs
justin at corelight.com
Wed Sep 11 07:03:49 PDT 2019
On Wed, Sep 11, 2019 at 9:38 AM Seth Hall <seth at corelight.com> wrote:
There are some advantages to using the Myricom plugin directly.
> Generally in my opinion I've been trying to avoid libpcap wrappers for
> quite a few years now because of various quality issues associated with
> several of them that I've experienced.
A few years ago I found a bug in the snfv3 shipped libpcap where pcap_next
would return the previous packet when no packets were available instead of
returning NULL. As far as I know it's still not fixed.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Zeek