Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
58 changes: 58 additions & 0 deletions .github/workflows/dpdk/suricata-pcap-mixed.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
%YAML 1.1
---
# Test configuration for DPDK PCAP file mode - mixed interface types
# This configuration demonstrates mixing net_pcap (PCAP file) and regular DPDK interfaces
# The net_pcap interface will exit when exhausted, while regular interface continues.

outputs:
- eve-log:
enabled: yes
filetype: regular
append: false
filename: eve.json
level: Info
types:
- stats:
totals: yes

dpdk:
eal-params:
proc-type: primary
# Mix net_pcap with a regular null device
vdev: ['net_pcap0,rx_pcap=/path/to/capture.pcap', 'net_null0']
no-huge:
m: 512

interfaces:
# PCAP file interface - will auto-exit when file is exhausted
- interface: net_pcap0
threads: 1
mempool-size: 511
mempool-cache-size: auto
rx-descriptors: 16
tx-descriptors: 16
copy-mode: none
pcap-file-mode: true

# Regular null device - continues running
- interface: net_null0
threads: 1
mempool-size: 511
mempool-cache-size: auto
rx-descriptors: 16
tx-descriptors: 16
copy-mode: none
# Explicitly disable PCAP file mode for regular interfaces
pcap-file-mode: false

threading:
set-cpu-affinity: yes
cpu-affinity:
- management-cpu-set:
cpu: [ 0 ]
- worker-cpu-set:
cpu: [ "1-2" ]
mode: "exclusive"

unix-command:
enabled: auto
57 changes: 57 additions & 0 deletions .github/workflows/dpdk/suricata-pcap-multiple.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@
%YAML 1.1
---
# Test configuration for DPDK PCAP file mode - multiple PCAP files
# This configuration demonstrates reading multiple PCAP files simultaneously
# Each interface will independently exit when its PCAP file is exhausted.

outputs:
- eve-log:
enabled: yes
filetype: regular
append: false
filename: eve.json
level: Info
types:
- stats:
totals: yes

dpdk:
eal-params:
proc-type: primary
# Configure multiple net_pcap virtual devices
# Replace paths with actual PCAP files
vdev: ['net_pcap0,rx_pcap=/path/to/capture1.pcap',
'net_pcap1,rx_pcap=/path/to/capture2.pcap']
no-huge:
m: 512

interfaces:
- interface: net_pcap0
threads: 1
mempool-size: 511
mempool-cache-size: auto
rx-descriptors: 16
tx-descriptors: 16
copy-mode: none
pcap-file-mode: true

- interface: net_pcap1
threads: 1
mempool-size: 511
mempool-cache-size: auto
rx-descriptors: 16
tx-descriptors: 16
copy-mode: none
pcap-file-mode: true

threading:
set-cpu-affinity: yes
cpu-affinity:
- management-cpu-set:
cpu: [ 0 ]
- worker-cpu-set:
cpu: [ "1-2" ]
mode: "exclusive"

unix-command:
enabled: auto
48 changes: 48 additions & 0 deletions .github/workflows/dpdk/suricata-pcap-single.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
%YAML 1.1
---
# Test configuration for DPDK PCAP file mode - single PCAP file
# This configuration demonstrates reading a single PCAP file using the net_pcap driver
# and automatically exiting when the file is exhausted.

outputs:
- eve-log:
enabled: yes
filetype: regular
append: false
filename: eve.json
level: Info
types:
- stats:
totals: yes

dpdk:
eal-params:
proc-type: primary
# Configure net_pcap virtual device to read from a PCAP file
# Replace /path/to/capture.pcap with actual PCAP file path
vdev: 'net_pcap0,rx_pcap=/path/to/capture.pcap'
no-huge:
m: 256

interfaces:
- interface: net_pcap0
threads: 1
mempool-size: 511
mempool-cache-size: auto
rx-descriptors: 16
tx-descriptors: 16
copy-mode: none
# Optional: explicitly enable PCAP file mode (auto-detected by default)
# pcap-file-mode: true

threading:
set-cpu-affinity: yes
cpu-affinity:
- management-cpu-set:
cpu: [ 0 ]
- worker-cpu-set:
cpu: [ 1 ]
mode: "exclusive"

unix-command:
enabled: auto
Loading
Loading