[Oisf-devel] the problem of suricata

iswalker mail2cissp at gmail.com
Wed Jan 5 02:39:54 UTC 2011


hi,when i read the codes of suricata,i found a problem ,the module of
suricata is multithread, the thread of receiveing pakcets use memcpy
function to EVERY pakcet, and this will make suricata slower, can when we
use zero copy tech to erase memcp in the next release ?

codes like the following:

in source-pcap.c/ReceivePcap/PcapCallback  function

  memcpy(p->pkt, pkt, p->pktlen);
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20110105/4454d7cb/attachment-0002.html>


More information about the Oisf-devel mailing list