Clustered AF_PACKET support

Description

Let's have a support for packet capture with the AF_PACKET sockets in multi worker configuration.

Bro can use a single worker with af_packet, I have tested and it works, but having a direct support for multi-worker load balancing would allow to avoid the pf_ring for many deployments with the traffic level where DNA / ZC / Myricom / DAG is not required.

Environment

None

Assignee

Robin Sommer

Reporter

Michal Purzynski

Labels

None

External issue ID

None

Components

Affects versions

Priority

Normal
Configure