[Oisf-users] Suricata Performance

[Will Metcalf]

Brant,

Forgot to cc the list on the last mail I sent you, is the majority of this
traffic is web browsing?  Are you using the default flow_depth forhttp_inspect?

Regards,

Will

On Mon, Jan 18, 2010 at 3:32 PM, Brant Wells <bwells at tfc.edu> wrote:

> Only Suricata.
>
> On Jan 18, 2010, at 4:29 PM, Will Metcalf wrote:
>
> >The CPU usage is ~120-130%, and the memory usage is at 30.6%
>
> Are these numbers for Suricata or the overall system performance?
>
> Regards,
>
> Will
>
> On Mon, Jan 18, 2010 at 3:25 PM, Brant Wells <bwells at tfc.edu> wrote:
>
>> Hi All  -- Guess Who?  lol.
>>
>> Anyhow, I've had Suricata running in IDS mode for a bit today and would
>> like to report on some usage stats.
>>
>> The last run I've had has been ~15mins or so.  I've let it load all the
>> Snort rules that I have that it can handle (running without the
>> --init-errors-fatal).
>>
>> The usage, so far has been fairly stable.  After adding Suricata to my
>> list of running apps on the Snort box, the internet doesn't seem to have
>> slowed too noticeably.
>>
>> The CPU usage is ~120-130%, and the memory usage is at 30.6%.  I have a
>> 20mbit (20 incoming and 20 outgoing) internet connection which is running at
>> ~18mbit download, ~3mbit upload right now.
>>
>> Snort is running at ~60% CPU usage and 6.2% memory usage.  That's my
>> report.  If you need more detail, let me know.
>>
>> Thanks!
>> ~Brant
>>
>> _______________________________________________
>> Oisf-users mailing list
>> Oisf-users at openinfosecfoundation.org
>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20100118/be0c68a0/attachment-0002.html>