From 3054af7900788324d37fed9ee496ba1e15db2558 Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Sat, 29 Aug 2015 10:49:26 +0200 Subject: [PATCH] af-packet: don't activate rollover by default Rollover option is causing issue with TCP streaming code because packets from the same flow to be treated out of order. As long as the situation is not fixed in the streaming engine, it is a bad idea to enable it by default. --- suricata.yaml.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/suricata.yaml.in b/suricata.yaml.in index ec1dfb2180..fa0fb9a00f 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -478,7 +478,7 @@ af-packet: - interface: default #threads: auto #use-mmap: yes - rollover: yes + #rollover: yes # Netmap support #