Run suricata with pfring on ubuntu
PF_Ring purposes for high speed packet capture, this post notes how to install and run Suricata with pf_ring on Ubuntu 22.04.
PF_Ring purposes for high speed packet capture, this post notes how to install and run Suricata with pf_ring on Ubuntu 22.04.
Zeek provides the packet-filter framework to allow filtering out network packets by BPF expressions.
There are quite a few examples online, for example 1 and 2, to demonstrate the capability. However, most examples show only ipv4 addresses.
What happen if tries to filter ipv6 addresses?
The shared IOMMU groups result in ports of a dual port network adapter can’t function individually.
The extended Berkeley Packet Filter (eBPF) allows filtering/processing packets in kernel in an efficient and customizable way. This article introduces setting up the eBPF environment under an Ubuntu 20.04 system.
Read More »Setup the extended Berkeley Packet Filter (eBPF) Environment
本文承接上一篇博文,继续介绍使用hack computer的指令(下文简称指令)实现sum 10的汇编程序。