[THREAD] thread_num = 1 [PACKET_IO] """ example1: run_mode = pcap_live interface = [eth0, eth1] """ run_mode = pcap_live # three mode: pcap_file/pcap_live/marsio interface = [eth0, eth1]