Planning to configure a new Redhat 8 server with suricate 6, pfring with intel zc drivers. Using dkms for the pf_ring module itself, but is this also possible with the Intel zc driver module? Maybe other thoughts how to configure this setup? Input will be with around 20Gb/s sustained and peeks of 80Gb/s.
Seeking some advise/sparring partners.
I believe it may not yet be common knowledge that you must add
CFLAGS=“-D_GNU_SOURCE” to the configure command when compiling suricata
6+ on RHEL8 and PF_RING
/configure --prefix=/opt/suricata --enable-pfring=yes --with-libpfring-includes=/usr/include --with-libpfring-libraries=/usr/lib --with-libhs-includes=/usr/local/include/hs --with-libhs-libraries=/usr/local/lib64 --enable-af-packet=no CFLAGS=“-D_GNU_SOURCE”