<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Not sure if this question was already asked or not.<div>Let's say I have pure http traffic (like 99% of the whole traffic). The pipe is 10 gigs but utilization is couple of gigs but it might grow.</div><div>To my understanding, Suricata inspecting this feed would use most of its memory on HTTP sessions. </div><div>Is there a way to estimate how much RAM (resources) I would need if throughput and type of traffic is known?</div><div><br></div><div><br></div><div>I can definitely provide some config snippets of mine. Just let me know which ones.</div><div><br></div><div>Thank you.</div> </div></body>
</html>