Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nfq: implement "fail-open" support. #6

Closed
wants to merge 1 commit into from

Commits on Aug 21, 2012

  1. nfq: implement "fail-open" support.

    On linux >= 3.6, you can use the fail-open option on a NFQ queue
    to have the kernel accept the packet if userspace is not able to keep
    pace.
    
    Please note that the kernel will not trigger an error if the feature is activated
    in userspace libraries but not available in kernel.
    
    This patch implements the option for suricata by adding a nfq.fail-open
    configuration variable which is desactivated by default.
    regit committed Aug 21, 2012
    Configuration menu
    Copy the full SHA
    ba615ec View commit details
    Browse the repository at this point in the history