diff --git a/faq.html b/faq.html index 7401a1e..6a4150b 100644 --- a/faq.html +++ b/faq.html @@ -728,7 +728,10 @@
The most common cause of packet drops with Arkime is leaving the reader - default of libpcap instead of switching to tpacketv3, pfring or one of - the other high performance packet readers. - We strongly recommend tpacketv3. See plugin - - settings - for more information. + default of libpcap instead of switching to tpacketv3, also known as AFPacket. + The tpacketv3 reader was greatly improved in Arkime 4.0, so please upgrade. + Review the high performance sample config and the + tpacketv3 settings to configure the tpacketv3 reader.