|
|
|
@ -466,7 +466,7 @@ af-packet:
|
|
|
|
|
defrag: yes
|
|
|
|
|
# After Linux kernel 3.10 it is possible to activate the rollover option: if a socket is
|
|
|
|
|
# full then kernel will send the packet on the next socket with room available. This option
|
|
|
|
|
# can minimize packet drop and increase the treated bandwith on single intensive flow.
|
|
|
|
|
# can minimize packet drop and increase the treated bandwidth on single intensive flow.
|
|
|
|
|
#rollover: yes
|
|
|
|
|
# To use the ring feature of AF_PACKET, set 'use-mmap' to yes
|
|
|
|
|
use-mmap: yes
|
|
|
|
@ -478,7 +478,7 @@ af-packet:
|
|
|
|
|
# Ring size will be computed with respect to max_pending_packets and number
|
|
|
|
|
# of threads. You can set manually the ring size in number of packets by setting
|
|
|
|
|
# the following value. If you are using flow cluster-type and have really network
|
|
|
|
|
# intensive single-flow you could want to set the ring-size independantly of the number
|
|
|
|
|
# intensive single-flow you could want to set the ring-size independently of the number
|
|
|
|
|
# of threads:
|
|
|
|
|
#ring-size: 2048
|
|
|
|
|
# Block size is used by tpacket_v3 only. It should set to a value high enough to contain
|
|
|
|
@ -508,7 +508,7 @@ af-packet:
|
|
|
|
|
#checksum-checks: kernel
|
|
|
|
|
# BPF filter to apply to this interface. The pcap filter syntax apply here.
|
|
|
|
|
#bpf-filter: port 80 or udp
|
|
|
|
|
# You can use the following variables to activate AF_PACKET tap od IPS mode.
|
|
|
|
|
# You can use the following variables to activate AF_PACKET tap or IPS mode.
|
|
|
|
|
# If copy-mode is set to ips or tap, the traffic coming to the current
|
|
|
|
|
# interface will be copied to the copy-iface interface. If 'tap' is set, the
|
|
|
|
|
# copy is complete. If 'ips' is set, the packet matching a 'drop' action
|
|
|
|
|