<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1434544626156_3033" class="" style="" dir="ltr">I for some reason am unable to get profiling to work on my sensors. Is there an issue in 2.04?<br><br><br>the build info<br>
</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3188">/usr/local/bin/suricata --build-info</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3189">This is Suricata version 2.0.4 RELEASE</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3190">Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 PF_RING AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS PROFILING </div><div class="" style="">SIMD support: SSE_4_2 SSE_4_1 SSE_3 </div><div class="" style="" id="yui_3_16_0_1_1434544626156_3414">Atomic intrisics: 1 2 4 8 16 byte(s)</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3413">64-bits, Little-endian architecture</div><div class="" style="">GCC version 4.4.7 20120313 (Red Hat 4.4.7-4), C version 199901</div><div class="" style="">compiled with -fstack-protector</div><div class="" style="">compiled with _FORTIFY_SOURCE=2</div><div class="" style="">L1 cache line size (CLS)=64</div><div class="" style="">compiled with LibHTP v0.5.15, linked against LibHTP v0.5.15</div><div class="" style="">Suricata Configuration:</div><div class="" style=""> AF_PACKET support: yes</div><div class="" style=""> PF_RING support: yes</div><div class="" style=""> NFQueue support: no</div><div class="" style=""> NFLOG support: no</div><div class="" style=""> IPFW support: no</div><div class="" style=""> DAG enabled: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3186"> Napatech enabled: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3156"> Unix socket enabled: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3155"> Detection enabled: yes</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3187"><br class="" style=""></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3185"> libnss support: yes</div><div class="" style=""> libnspr support: yes</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3193"> libjansson support: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3184"> Prelude support: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3183"> PCRE jit: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3182"> LUA support: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3179"> libluajit: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3535"> libgeoip: no</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3536"> Non-bundled htp: no</div><div class="" style=""> Old barnyard2 support: no</div><div class="" style=""> CUDA enabled: no</div><div class="" style=""><br class="" style=""></div><div class="" style=""> Suricatasc install: yes</div><div class="" style=""><br class="" style=""></div><div class="" style=""> Unit tests enabled: no</div><div class="" style=""> Debug output enabled: no</div><div class="" style=""> Debug validation enabled: no</div><div class="" style=""> Profiling enabled: yes</div><div class="" style=""> Profiling locks enabled: no</div><div class="" style=""> Coccinelle / spatch: no</div><div class="" style=""><br class="" style=""></div><div class="" style="">Generic build parameters:</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3242"> Installation prefix (--prefix): /usr/local</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3245"> Configuration directory (--sysconfdir): /usr/local/etc/suricata/</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3246"> Log directory (--localstatedir) : /usr/local/var/log/suricata/</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3247"><br class="" style=""></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3196"> Host: x86_64-unknown-linux-gnu</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3197"> GCC binary: gcc</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3198"> GCC Protect enabled: yes</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3224"> GCC march native enabled: yes</div><div>
</div><div class="" dir="ltr" style="" id="yui_3_16_0_1_1434544626156_3223"> GCC Profile enabled: no</div><div class="" dir="ltr" style="" id="yui_3_16_0_1_1434544626156_3209"><br></div><div class="" dir="ltr" style="" id="yui_3_16_0_1_1434544626156_3213"><br></div><div class="" dir="ltr" style="" id="yui_3_16_0_1_1434544626156_3214">System info<br><br>
</div><div class="" dir="ltr" style="" id="yui_3_16_0_1_1434544626156_3215">Linux sensor-name 3.8.13-16.2.1.el6uek.x86_64 #1 SMP Thu Nov 7 17:01:44 PST 2013 x86_64 x86_64 x86_64 GNU/Linux<br><br> Suricata.yaml appropriate section</div><div class="" dir="ltr" style="" id="yui_3_16_0_1_1434544626156_3215"><br></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3401"><span class="" style=""> </span><span class="" style=""> # rule </span><span class="" style="">profiling</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3400"><span class="" style=""> </span>rules<span class="" style="">:</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3399"><br class="" style=""></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3398"><span class="" style=""> </span> # Profiling can be disabled here, but it will still have a</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3397"><span class="" style=""> </span> # performance impact if compiled in.</div><div class="" style=""><span class="" style=""> </span>enabled<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">yes</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3396"> <span class="" style="">filename</span><span class="" style="">:</span> rule_perf.log</div><div class="" style=""><span class="" style=""> </span>append<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">yes</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3395"><br class="" style=""></div><div class="" style=""><span class="" style=""> </span> # Sort options: ticks, avgticks, checks, matches, maxticks</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3394"> <span class="" style="">sort</span><span class="" style="">:</span> avgticks</div><div class="" style=""><br class="" style=""></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3393"><span class="" style=""> </span> # Limit the number of items printed at exit.</div><div class="" style=""> <span class="" style="">limit</span><span class="" style="">:</span> <span class="" style="">100</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3392"><br class="" style=""></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3391"><span class="" style=""> </span> # per keyword <span class="" style="">profiling</span></div><div class="" style=""><span class="" style=""> </span>keywords<span class="" style="">:</span></div><div class="" style=""><span class="" style=""> </span>enabled<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">yes</span></div><div class="" style=""> <span class="" style="">filename</span><span class="" style="">:</span> keyword_perf.log</div><div class="" style=""><span class="" style=""> </span>append<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">yes</span></div><div class="" style=""><br class="" style=""></div><div class="" style=""><span class="" style=""> </span> # packet <span class="" style="">profiling</span></div><div class="" style=""><span class="" style=""> </span>packets<span class="" style="">:</span></div><div class="" style=""><br class="" style=""></div><div class="" style=""><span class="" style=""> </span> # Profiling can be disabled here, but it will still have a</div><div class="" style=""><span class="" style=""> </span> # performance impact if compiled in.</div><div class="" style=""><span class="" style=""> </span>enabled<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">yes</span></div><div class="" style=""> <span class="" style="">filename</span><span class="" style="">:</span> packet_stats.log</div><div class="" style=""><span class="" style=""> </span>append<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">yes</span></div><div class="" style=""><br class="" style=""></div><div class="" style=""><span class="" style=""> </span> # per packet csv output</div><div class="" style=""> <span class="" style="">csv</span><span class="" style="">:</span></div><div class="" style=""><br class="" style=""></div><div class="" style=""><span class="" style=""> </span> # Output can be disabled here, but it will still have a</div><div class="" style=""><span class="" style=""> </span> # performance impact if compiled in.</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3390"> <span class="" style="">enabled</span><span class="" style="">:</span> <span class="" style="">no</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3389"> <span class="" style="">filename</span><span class="" style="">:</span> packet_stats.csv</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3388"><br class="" style=""></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3387"><span class="" style=""> </span> # <span class="" style="">profiling</span> of locking. Only available when Suricata was built with</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3386"><span class="" style=""> </span> # --enable-<span class="" style="">profiling</span>-locks.</div><div class="" style="" id="yui_3_16_0_1_1434544626156_3385"><span class="" style=""> </span>locks<span class="" style="">:</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3384"><span class="" style=""> </span>enabled<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">no</span></div><div class="" style="" id="yui_3_16_0_1_1434544626156_3383"> <span class="" style="">filename</span><span class="" style="">:</span> lock_stats.log</div><div class="" dir="ltr" style="" id="yui_3_16_0_1_1434544626156_3215">
</div><div class="" dir="ltr" style=""><span class="" style=""> </span>append<span class="" style="">:</span><span class="" style=""> </span><span class="" style="">yes</span></div><div id="yui_3_16_0_1_1434544626156_3033" class="" style=""> </div></div></body></html>