<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">I<br><div><br>On 11 Jan 2018, at 07:19, Steve Castellarin <<a href="mailto:steve.castellarin@gmail.com">steve.castellarin@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">After my last email yesterday I decided to go back to our 3.1.1 install of Suricata, with</div></div></blockquote><div><br></div><blockquote type="cite"><div><div dir="ltr"> the upgraded Napatech version. Since then I've seen no packets dropped with sustained bandwidth of between 1 and 1.7Gbps. So I'm not sure what is going on with my configuration/setup of Suricata 4.0.3.</div><div class="gmail_extra"><br></div></div></blockquote><div><br></div><div><br></div><div>So the only thing that you changed is the upgrade of the Napatech drivers ?</div><div>The Suricata config stayed the same - you just upgraded to 4.0.3 (from 3.1.1) and the observed effect was - after a while all (or most) cpus get pegged at 100% - is that correct ?</div><div><br></div><br><blockquote type="cite"><div><div class="gmail_extra"><div class="gmail_quote">On Wed, Jan 10, 2018 at 4:46 PM, Steve Castellarin <span dir="ltr"><<a href="mailto:steve.castellarin@gmail.com" target="_blank">steve.castellarin@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Hey Peter, no there is no error messages.</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Jan 10, 2018 4:37 PM, "Peter Manev" <<a href="mailto:petermanev@gmail.com" target="_blank">petermanev@gmail.com</a>> wrote:<br type="attribution"><blockquote class="m_-3625087832607169200quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Wed, Jan 10, 2018 at 11:29 AM, Steve Castellarin<br>
<<a href="mailto:steve.castellarin@gmail.com" target="_blank">steve.castellarin@gmail.com</a>> wrote:<br>
> Hey Peter,<br>
<br>
Are there any errors msgs in suricata.log when that happens ?<br>
<br>
Thank you<br>
<font color="#888888"><br>
<br>
<br>
--<br>
Regards,<br>
Peter Manev<br>
</font></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></blockquote></body></html>