]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
doc: how to get live info about ebpf behavior
authorEric Leblond <eric@regit.org>
Wed, 17 Jan 2018 15:59:23 +0000 (16:59 +0100)
committerEric Leblond <eric@regit.org>
Tue, 6 Feb 2018 15:58:19 +0000 (16:58 +0100)
doc/userguide/capture-hardware/ebpf-xdp.rst

index 44751f147d816bc1009a49de9c82cdc8d3f5842c..51fbe6026fb817727acab78e17f900b3a281ee23 100644 (file)
@@ -338,3 +338,8 @@ Confirm you have the XDP filter engaged in the output (example)::
  (util-runmodes.c:296) <Info> (RunModeSetLiveCaptureWorkersForDevice) -- Going to use 8 thread(s)
  ...
  ...
+
+You can get information about bypass via the stats event and through the unix socket.
+`ìface-stat` will return the number of bypassed packets (adding packets for a flow when it timeout).
+`ebpf-bypassed-stats` command will return the number of element in IPv4 and IPv6 flow tables for
+each interfaces.