Mailing List Archive

Module option question
Could someone please explain the modules options in a little bit more
detail?

enable_ip_defrag
Set to 1 to enable IP defragmentation, only rx traffic is defragmented.

quick_mode
Set to 1 to run at full speed but with up to one socket per interface.

I'm looking for options that will help me tweak Bro performance, running in
a RX only mode.

Thanks
Re: Module option question [ In reply to ]
Hi Carl

> On 7 May 2018, at 19:20, Carl Rotenan <carlrotenan@gmail.com> wrote:
>
> Could someone please explain the modules options in a little bit more detail?
>
> enable_ip_defrag
> Set to 1 to enable IP defragmentation, only rx traffic is defragmented.

This option should be set to enable fragments reconstruction, this is based on the kernel defragmentation support.

> quick_mode
> Set to 1 to run at full speed but with up to one socket per interface.

This option can be used to improve the capture performance with kernel drivers, with the constraint that you cannot run more than one process per interface/queue.

Alfredo

> I'm looking for options that will help me tweak Bro performance, running in a RX only mode.
>
> Thanks
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc