[Oisf-devel] how to tune suricata.yaml if I only record http access log with suricata

Delta Yeh delta.yeh at gmail.com
Thu Sep 15 03:28:11 UTC 2011


Hi,
  If  I use suricata only to record http  access log, that means I
don't need any IDS signature,
how to tune suricata.yaml to minimize the memory  of suricata and gain
highest performance.
  For example, how to set detect-engine  and mpm-algo ?

BR,
DeltaY



More information about the Oisf-devel mailing list