<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>The online documentation did not mention how to choose between autofp and workers runmode.<br>The doc does mention the potential bottlenecks of autofp (like pickup-queue lock and flow lock).<br>So what is the potential bottleneck of workers runmode? The flow lock? As far as i understand, different workers only need to share the flow info.<br><br>Could you please give a basic idea what kinds of situation is good for autofp, or what is good for workers?<br>What runmodes are most of suricata users being using now?<br><br>Thank you very much.<br><br> </div></body>
</html>