af-packet: don't activate rollover by default

Rollover option is causing issue with TCP streaming code because
packets from the same flow to be treated out of order. As long as
the situation is not fixed in the streaming engine, it is a bad idea
to enable it by default.

diff --git a/suricata.yaml.in b/suricata.yaml.in
index ec1dfb2180a79260d567d94c29402d24d8127c8f..fa0fb9a00f097f616f58e43c8c9fc2111c747e31 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -478,7 +478,7 @@ af-packet:
   - interface: default
     #threads: auto
     #use-mmap: yes
-    rollover: yes
+    #rollover: yes
 
 # Netmap support
 #