<html><head><style>p{margin-top:0px;margin-bottom:0px;}</style></head><body><div style="font-family: Gulim; font-size: 10pt;"><p>Hello all.</p><p> </p><p>I sent you an email about one issue a few days ago.</p><p>The issue was that the results(aler messages in fast.log) were different whenever the suricata(version 2.0.11) was executed.</p><p>After upgrading the version from 2.0.11 to 3.2, I did the test again.</p><p>Unfortunately, alert messages were different whenever the suricata was run with same a pcap-file.</p><p> </p><p>I think that alert-messages should be same, if it is used the same pcap file or files.</p><p> </p><p>I didn't change the configure file(suricata.yaml) and pcap-file's size is 693MB.</p><p>(pc memory is 8GB, cpu is intel i5-4460, os is Ubuntu 16.06)</p><p> </p><p>please explain to me about this situation.</p><p> </p><p>-Kyungho</p></div>
</body></html>
<table style="display:none"><tr><td><img src="https://mail.naver.com/readReceipt/notify/?img=1mbdKokcpXIoMoi4hAnXF6JoKrkCK4t%2FKoKlFoglpxUZpxuraA3vaAMwFvIo%2BrkSKAE5W4d5W4C5bX0q%2BzkR74FTWx%2FsWr0qpS99brkZbdIn1BFdbZlTbzk516l4WXF0MrpT%2B6lvMB3GWr%2F5WXiN.gif" border="0"></td></tr></table>