Peter the BPF filter is not counted as "Sw Filt. Rules" (this only includes wildcard and hash rules)
Regards Alfredo On Jul 9, 2012, at 12:57 PM, Peter Bates wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Hello all... > > Just a quick question. > > I'm running 5 apps under PF_RING. > > 1 is unclustered and uses a BPF expression, and the proc output says: > > BPF Filtering : Enabled > # Sw Filt. Rules : 0 > # Hw Filt. Rules : 0 > > The other 4 instances are the same application (Snort) and the same > cluster-id with a BPF expression but show: > > BPF Filtering : Enabled > # Sw Filt. Rules : 17176 > # Hw Filt. Rules : 0 > > BPF Filtering : Enabled > # Sw Filt. Rules : 16305 > # Hw Filt. Rules : 0 > > Why is the first application '0' even though it has a (software) BPF > expression, and the others are differing numbers? > > Thanks. > > - -- > Peter Bates > Senior Computer Security Officer Phone: +44(0)2076792049 > Information Services Division Internal Ext: 32049 > University College London > London WC1E 6BT > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.17 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iQEcBAEBAgAGBQJP+rkDAAoJELhVoVpEMS6RcN8H/AyaCO4LNJdUM7wGqsfwsnT1 > hDfkeoeRtmodWKpLRqF3sxQPDiZVcOZ5OJU3oAUqQSvRxYlgKy+knM3k198MbNqH > x6+tJUzUyMdS+yQCIK5DNrAMTHzFf/P4db3eAUoJGANntx51cNRzdHQqGV1Vhp40 > VKA4m5y96yTlfJtNLK1MmuRzqJHlwfi8usw5JiHo6yUmGhGqtLEseC4dKlHV06Gq > EsZIGIqMnsKpY/3joU10mutaT4CblJdhqDkSARJeACKRuBB7FLgQvQ60hAON8uuq > e/woh2J9vks41UxXMmVRhfqGsxePkctsNDfmY9nBcE/o0qlWnfnYUbNiBG34qLw= > =SOEV > -----END PGP SIGNATURE----- > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
