Re: Zeek and myricom NICs
Justin Azoff <[email protected]> Wed, 11 Sep 2019 10:03:49 -0400
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPfnCug4u70N9Jf8250xi344ZOdz5nvEv17UU_g1dYo=6PBBXw@mail.gmail.com> |
On Wed, Sep 11, 2019 at 9:38 AM Seth Hall <[email protected]> wrote: There are some advantages to using the Myricom plugin directly. > Generally in my opinion I've been trying to avoid libpcap wrappers for > quite a few years now because of various quality issues associated with > several of them that I've experienced. > A few years ago I found a bug in the snfv3 shipped libpcap where pcap_next would return the previous packet when no packets were available instead of returning NULL. As far as I know it's still not fixed. -- Justin _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek