From 8b0f35b88c05f97269cb0cb27686bce952d86148 Mon Sep 17 00:00:00 2001
From: Andy Wick
The most common cause of packet drops with Arkime is leaving the reader - default of libpcap instead of switching to tpacketv3, pfring or one of - the other high performance packet readers. - We strongly recommend tpacketv3. See plugin - - settings - for more information. + default of libpcap instead of switching to tpacketv3, also known as AFPacket. + The tpacketv3 reader was greatly improved in Arkime 4.0, so please upgrade. + Review the high performance sample config and the + tpacketv3 settings to configure the tpacketv3 reader.