On 03/26/2013 05:42 PM, Eric Leblond wrote:
> In src/source-af-packet.c:
> 
>> @@ -1545,8 +1545,14 @@ TmEcode ReceiveAFPThreadInit(ThreadVars *tv, void *initdata, void **data) {
>>      if (ptv->copy_mode != AFP_COPY_MODE_NONE) {
>>          strlcpy(ptv->out_iface, afpconfig->out_iface, AFP_IFACE_NAME_LENGTH);
>>          ptv->out_iface[AFP_IFACE_NAME_LENGTH - 1]= '\0';
>> +        /* Warn about BPF filter consequence */
>> +        if (ptv->bpf_filter) {
>> +            SCLogInfo("WARNING, enabling a BPF filter in IPS mode result"
> 
> You've got a serious argument here :) I've choose Info because it can be
> normal if the user really know what he does.
> 

I'm sure a user like that can ignore a _real_ warning then :)