sostat: don't show pf_ring output if af_packet in use

weslambert commented 5 years ago

In addition, show percentage of capture.kernel_drops vs. capture.kernel_packets in stats.log.

dougburks commented 4 years ago

Looks like drops vs packets percentage has already been implemented at https://github.com/Security-Onion-Solutions/security-onion/issues/1663.

dougburks commented 4 years ago

The following package is now available at ppa:securityonion/test:

securityonion-sostat - 20120722-0ubuntu0securityonion144

Please test as follows:

add the test PPA:

sudo add-apt-repository -y ppa:securityonion/test

install updates:
```
sudo soup
```
run sostat and verify that it include the pf_ring section when running pf_ring but does not include the pf_ring section when running af_packet
```
sudo sostat
```
verify no regressions
anything else we missed?

Thanks in advance for your time and effort!

weslambert commented 4 years ago

Confirmed working as expected. 👍

dougburks commented 4 years ago

Thanks @weslambert !

dougburks commented 4 years ago

Security-Onion-Solutions / security-onion