<div dir="ltr">My apologies. You are right. I meant to say we had switched off Suricata completely because it was interrupting our work. Next Monday we are going to first measure Suricata performance under heavy load and then proceed to disable its rules, whereupon I will report my findings accordingly.<br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">---------- Forwarded message ---------<br>От: <strong class="gmail_sendername" dir="auto">James Moe</strong> <span dir="auto"><<a href="mailto:jimoe@sohnen-moe.com">jimoe@sohnen-moe.com</a>></span><br>Date: пт, 17 янв. 2020 г. в 20:45<br>Subject: Re: [Oisf-users] Fwd: Unblock whatsapp<br>To: <<a href="mailto:oisf-users@lists.openinfosecfoundation.org">oisf-users@lists.openinfosecfoundation.org</a>><br></div><br><br>On 2020-01-17 3:34 AM, Владислав Дубов wrote:<br>
<br>
> Intel(R) Xeon(TM) CPU 2.80GHz<br>
> 2 CPUs: 1 package(s) x 2 hardware threads<br>
> AES-NI CPU Crypto: No<br>
> Memory 1997 MiB<br>
> <br>
> Is it adequate for our needs?<br>
> <br>
> We have now switched SURICATA altogether. We are not experiencing any network<br>
> problems at all.<br>
> <br>
Switched it to what? I am guessing "off."<br>
I am guessing the Suricata uses too many resources for the platform. Since you<br>
have not answered any of the performance requests, or tried disabling the<br>
SURICATA rules, I cannot offer much further assistance.<br>
<br>
-- <br>
James Moe<br>
moe dot james at sohnen-moe dot com<br>
520.743.3936<br>
Think.<br>
<br>
_______________________________________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org" target="_blank">oisf-users@openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" rel="noreferrer" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" rel="noreferrer" target="_blank">http://suricata-ids.org/support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noreferrer" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
<br>
Conference: <a href="https://suricon.net" rel="noreferrer" target="_blank">https://suricon.net</a><br>
Trainings: <a href="https://suricata-ids.org/training/" rel="noreferrer" target="_blank">https://suricata-ids.org/training/</a></div></div>