Packages with the afpacket use flag

net-libs / daq : Data Acquisition library, for packet I/O

  • Build the AFPacket data acquisition module. Functions similar to the PCAP module but with better performance. Snort can run unprivileged when using this module. AFpacket supports both inline and passive modes.