[Zeek] Zeek and myricom NICs

Justin Azoff justin at corelight.com
Wed Sep 11 07:03:49 PDT 2019


On Wed, Sep 11, 2019 at 9:38 AM Seth Hall <seth at corelight.com> wrote:

There are some advantages to using the Myricom plugin directly.
> Generally in my opinion I've been trying to avoid libpcap wrappers for
> quite a few years now because of various quality issues associated with
> several of them that I've experienced.
>

A few years ago I found a bug in the snfv3 shipped libpcap where pcap_next
would return the previous packet when no packets were available instead of
returning NULL.  As far as I know it's still not fixed.

-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190911/3c73a3c8/attachment.html 


More information about the Zeek mailing list