<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:10pt"><div style="" class="">Hi,<br style=""> I compiled Suricata on an x86 Ubuntu 12.04.4 host.<br style="" class="">I ran it on a pcap file as follows.<br style="" class=""><br style="" class="">$ ./suricata -r ~/purplehaze.pcap -k none<br style="" class="">3/7/2014 -- 14:41:23 - <Notice> - This is Suricata version 2.0.2 RELEASE<br style="" class="">3/7/2014 -- 14:41:32 - <Warning> - [ERRCODE: SC_ERR_NOT_SUPPORTED(225)] - Eve-log support not compiled in. Reconfigure/recompile with libjansson and its development files installed to add eve-log support.<br style="" class="">3/7/2014 -- 14:41:32 - <Notice> - all 4 packet processing threads, 3 management threads initialized, engine started.<br style="" class="">3/7/2014 -- 14:41:45 - <Notice> - Signal Received. Stopping
engine.<br style="" class="">3/7/2014 -- 14:41:45 - <Notice> - Pcap-file module read 324711 packets, 236414266 bytes<br style="" class=""><br style="" class="">I want to do performance measurement of Suricata using pcap files, basically how much time Suricata took to process the given pcap file.<br style="" class="">Doesn't Suricata, like Snort print this info ?<br style="" class="">Does one have to manually calculate the time from the log (copied above) ?<br style="" class=""><br style="" class="">Thank you,<br style="" class="">Mahendra<br style="" class=""></div></div></body></html>