# \#pfring

**URL:** https://forum.suricata.io/tag/pfring/16.md

[Latest](https://forum.suricata.io/latest.md) · [Categories](https://forum.suricata.io/categories.md) · [Tags](https://forum.suricata.io/tags.md)

---

## [Suricata 6.0.6 fails to compile with pf\_ring 8](https://forum.suricata.io/t/suricata-6-0-6-fails-to-compile-with-pf-ring-8/2730)

<div class="topic-metadata">

**Author:** [@abolinhas](https://forum.suricata.io/u/abolinhas)\
**Replies:** 25\
**Last updated:** [September 22, 2023, 1:47pm UTC](https://forum.suricata.io/t/suricata-6-0-6-fails-to-compile-with-pf-ring-8/2730 "2023-09-22T13:47:37Z")

</div>

Hi I’m trying to compile Suricata 6.0.6 with pf\_ring 8 on Debian 10 with kernel 4.19.0-21-amd64, but it fails with the error ERROR! --enable-pfring was passed but the library version is \< 6, go get it from http://www.…

---

## [High capture.kernel\_drops count（pfring，hyperscan）](https://forum.suricata.io/t/high-capture-kernel-drops-count-pfring-hyperscan/3429)

<div class="topic-metadata">

**Author:** [@Ryan](https://forum.suricata.io/u/Ryan)\
**Replies:** 6\
**Last updated:** [May 12, 2023, 8:17am UTC](https://forum.suricata.io/t/high-capture-kernel-drops-count-pfring-hyperscan/3429 "2023-05-12T08:17:59Z")

</div>

Hi guys： There was a problem during the testing，I need your help，thinks. information： suricata version：6.0.3 This is my NIC p2p2 info, it has probably about 1.6G/s traffic. \[root@f/\]# cat /proc/net/pf\_ring/dev/p2p2/…

---

## [Suricata high capture.kernel\_drops count. I use the PF\_RING zc mode](https://forum.suricata.io/t/suricata-high-capture-kernel-drops-count-i-use-the-pf-ring-zc-mode/2737)

<div class="topic-metadata">

**Author:** [@wangfeng22](https://forum.suricata.io/u/wangfeng22)\
**Replies:** 30\
**Last updated:** [September 21, 2022, 8:04am UTC](https://forum.suricata.io/t/suricata-high-capture-kernel-drops-count-i-use-the-pf-ring-zc-mode/2737 "2022-09-21T08:04:56Z")

</div>

This is my NIC eth2 info, it has probably about 5G/s traffic. # I have executed PF\_RING \`./load\_driver.sh. The eth2 NIC zero-copy mode is normal. \[root@sec-audit-lljx-027093 ~\]# cat /proc/net/pf\_ring/dev/eth2/info Name:…

---

## [Kernel\_drops larger than kernel\_packets?](https://forum.suricata.io/t/kernel-drops-larger-than-kernel-packets/2512)

<div class="topic-metadata">

**Author:** [@joshua.bigler](https://forum.suricata.io/u/joshua.bigler)\
**Replies:** 5\
**Last updated:** [August 31, 2022, 4:11am UTC](https://forum.suricata.io/t/kernel-drops-larger-than-kernel-packets/2512 "2022-08-31T04:11:28Z")

</div>

According to the suricata stats log, the kernel\_drops count is larger than the kernel\_packets count, which is very confusing: # tail -n 1 /opt/isd/data/suricata/stats.json | python3 -c 'import sys,json; print(json.load(…

---

## [Suricata breaks after a little time](https://forum.suricata.io/t/suricata-breaks-after-a-little-time/1207)

<div class="topic-metadata">

**Author:** [@w2n1ck](https://forum.suricata.io/u/w2n1ck)\
**Replies:** 6\
**Last updated:** [March 11, 2021, 8:39am UTC](https://forum.suricata.io/t/suricata-breaks-after-a-little-time/1207 "2021-03-11T08:39:29Z")

</div>

10/3/2021 -- 18:33:38 - \<Notice\> - This is Suricata version 6.0.2 RELEASE running in SYSTEM mode 10/3/2021 -- 18:33:38 - \<Info\> - CPUs/cores online: 24 10/3/2021 -- 18:33:38 - \<Info\> - Protocol detection and parser disab…