docs: remove obsolete af-packet warning

3 years ago · 6ec3bc189a
parent 0e55307c1d
commit 6ec3bc189a
1 changed files with 0 additions and 3 deletions
--- a/doc/userguide/performance/packet-capture.rst
+++ b/doc/userguide/performance/packet-capture.rst
@ -8,11 +8,8 @@ To get the best performance, Suricata will need to run in 'workers' mode. This e

 The AF_PACKET and PF_RING capture methods both have options to select the 'cluster-type'. These default to 'cluster_flow' which instructs the capture method to hash by flow (5 tuple). This hash is symmetric. Netmap does not have a cluster_flow mode built-in. It can be added separately by using the "'lb' tool":https://github.com/luigirizzo/netmap/tree/master/apps/lb

-> **WARNING** Recent AF_PACKET changes have "broken":https://redmine.openinfosecfoundation.org/issues/1777 this symmetry. Work is under way to "address this":https://redmine.openinfosecfoundation.org/issues/1777#note-7, but for now stay on kernel <=4.2 or update to 4.4.16+, 4.6.5+ or 4.7+.
-
 On multi-queue NICs, which is almost any modern NIC, RSS settings need to be considered.

-
 RSS
 ---