<html><head><style>p{margin-top:0px;margin-bottom:0px;}</style></head><body><div style="font-size:10pt; font-family:Gulim;"><p>Thank you for your response. </p><p>After upgrading to the latest version and testing on Debian,</p><p>i will send the result to you.</p><p> </p><p>-KyungHo </p><p style="padding: 0px 0px 0px 10pt; font-family: sans-serif; font-size: 10pt;"><span>-----Original Message-----</span><br><b>From:</b> "Francis Trudeau"<ftrudeau@emergingthreats.net> <br><b>To:</b> <oisf-users@lists.openinfosecfoundation.org>; <br><b>Cc:</b> <br><b>Sent:</b> 2017-01-10 (화) 05:07:00<br><b>Subject:</b> Re: [Oisf-users] [Question] suricata test with pcap-file<br> </p><div dir="ltr">2.0.11 is pretty old now. Current is 3.2. I would upgrade and see if that helps.<div> </div><div>Upgrading on Debian shouldn't be too much of an issue. It looks like the Debian testing repo has the latest:</div><div> </div><div><a href="https://tracker.debian.org/pkg/suricata" target="_blank">https://tracker.debian.org/pkg/suricata</a></div><div><div><div> </div><div>I have a vague memory of perf testing having bugs in the past. Others here will surely have more detail.</div><div> </div><div>-FT</div><div> </div><div> </div><div> </div></div></div></div><div><br><div>On Mon, Jan 9, 2017 at 4:07 AM, 박경호 <span dir="ltr"><<a href="mailto:pgh5247@naver.com" target="_blank">pgh5247@naver.com</a>></span> wrote:<br><blockquote style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-style: solid;"><div><div style="font-family: Gulim; font-size: 10pt;"><p>Hello all.</p><p> </p><p>This is first-day joining the suricata-development group.</p><p>i am so happy to share the knowledge with you.</p><p> </p><p>nowdays, </p><p>i am testing the suricata performance with pcap-files.</p><p>I found the wrong result or bug for testing.</p><p> </p><p>i had run the suricata repeatly with the same pcap-files.(about 470GB, 60 pcap-files).</p><p>But, the result messages are different.(different tuple or different viloation message).</p><p> </p><p>please explain to me whether these results are right or wrong?</p><p>if these results are wrong, how do i do for make good results(same result message)?</p><p> </p><p>i used the suricata 2.0.11 version and pc is intel xeon e5-2620 and 16GB RAM and debian 64bit.</p><p> </p><p>Thank you for your email in advance. </p></div></div>
<table style="display: none;"><tbody><tr><td><img border="0"></td></tr></tbody></table><br>______________________________<wbr>_________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org" target="_blank">oisf-users@<wbr>openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" target="_blank" rel="noreferrer">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank" rel="noreferrer">http://suricata-ids.org/<wbr>support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank" rel="noreferrer">https://lists.<wbr>openinfosecfoundation.org/<wbr>mailman/listinfo/oisf-users</a><br>
<br></blockquote></div> </div>
</div></body></html>
<table style="display:none"><tr><td><img src="https://mail.naver.com/readReceipt/notify/?img=1XndKokcpXglFAE9hAnXFqiopzt9F4ioFrMrpxkCFou%2FFoEZFqFvFoiCFvIo%2BrkSKxK5W4d5W4C5bX0q%2BzkR74FTWx%2FsWr0qpS99brkZbdIn1BFdbZlTbzk516l4WXF0MrpT%2B6lvMB3GWr%2F5WXiN.gif" border="0"></td></tr></table>