mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
32 lines
636 B
ReStructuredText
32 lines
636 B
ReStructuredText
8 months ago
|
.. _afpacket:
|
||
|
|
|
||
|
|
AF_PACKET
|
||
|
|
#########
|
||
|
|
|
||
|
|
Introduction
|
||
|
|
************
|
||
|
|
|
||
|
|
AF_PACKET is a capture interface to the Linux Kernel.
|
||
|
|
|
||
|
|
Config Options
|
||
|
|
**************
|
||
|
|
|
||
|
|
disable-hwtimestamp
|
||
|
|
===================
|
||
|
|
|
||
|
|
Boolean option to disable hardware timestamping on an interface.
|
||
|
|
|
||
|
|
By default the hardware timestamping support is enabled if the system support it.
|
||
|
|
|
||
|
|
Hardware timestamping can lead to issue of the NIC and kernel getting out of sync. See
|
||
|
|
`ticket 7585 <https://redmine.openinfosecfoundation.org/issues/7585>`_.
|
||
|
|
|
||
|
|
::
|
||
|
|
|
||
|
|
af-packet:
|
||
|
|
- interface: eth0
|
||
|
|
cluster-id: 99
|
||
|
|
disable-hwtimestamp: true
|
||
|
|
cluster-type: cluster_flow
|
||
|
|
|