yaml: default to cluster_flow type for AF_PACKET and PF_RING

diff --git a/suricata.yaml.in b/suricata.yaml.in
index 701b243b7683f1513b7c57c8380f4c4fe6251351..1aa9e57093b65bcd4d8299ad8d3d9adc1c3e1f6d 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -224,7 +224,7 @@ af-packet:
     #  * cluster_round_robin: round robin load balancing
     #  * cluster_flow: all packets of a given flow are send to the same socket
     #  * cluster_cpu: all packets treated in kernel by a CPU are send to the same socket
-    cluster-type: cluster_round_robin
+    cluster-type: cluster_flow
     # In some fragmentation case, the hash can not be computed. If "defrag" is set
     # to yes, the kernel will do the needed defragmentation before sending the packets.
     defrag: yes
@@ -266,7 +266,7 @@ af-packet:
   - interface: eth1
     threads: 1
     cluster-id: 98
-    cluster-type: cluster_round_robin
+    cluster-type: cluster_flow
     defrag: yes
     # buffer-size: 32768
     # disable-promisc: no
@@ -638,7 +638,7 @@ pfring:
 
     # Default PF_RING cluster type. PF_RING can load balance per flow or per hash.
     # This is only supported in versions of PF_RING > 4.1.1.
-    cluster-type: cluster_round_robin
+    cluster-type: cluster_flow
     # bpf filter for this interface
     #bpf-filter: tcp
     # Choose checksum verification mode for the interface. At the moment