mirror of https://github.com/OISF/suricata
af-packet: update packet reading loop logic
This patch updates the logic of the packet acquisition loop. When the reader loop function is called and when the data to read at offset is a without data (kernel) or still used by suricata. We try to iter for a loop on the ring to try to find kernel put by data. As we are entering the function because the poll said there was some data. This allow us to jump to the data added to the ring by the kernel. When using suricata in autofp mode, with multiple detect threads and packet acquisition threads attached to a dedicated CPU, the reader loop function was looping really fast because poll call was returning immediatly because we did read the data available.pull/758/head
parent
55108167e5
commit
98e4a14f6d
Loading…
Reference in New Issue