[Oisf-users] Smooth-Sec 1.3 is out.

[Victor Julien]

On 11/24/2011 04:56 PM, phillip at bailey.st wrote:
> On 11/24/2011 04:07 PM, Eric Leblond wrote:
>> Hello,
>>
>> Le jeudi 24 novembre 2011 à 16:04 +0100, Victor Julien a écrit :
>>> On 11/24/2011 03:56 PM, phillip at bailey.st wrote:
>>>> On 11/24/2011 12:23 PM, Victor Julien wrote:
>>>>> On 11/24/2011 09:45 AM, phillip at bailey.st wrote:
>>>>>>
>>>>>> Hello everyone,
>>>>>>
>>>>>> early today I've released a new version (1.3) of Smooth-Sec,
>>>>>> major improvements are Snorby upgraded to version 2.3.11 and
>>>>>> Suricata upgraded to version 1.1 stable, compiled with with
>>>>>> NFQ support.
>>>>>>
>>>>>> Download here:
>>>>>> https://sourceforge.net/projects/smoothsec/files/SmoothSec-1.3/
>>>>>
>>>>> Congrats! I updated the wiki page on Suricata versions here:
>>>>> https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Distributions_Containing_Suricata
>>>>>
>>>>> Cheers,
>>>>> Victor
>>>>>
>>>>
>>>> Hi Victor,
>>>>
>>>> just a short question, I still have the CPU 100% and high load
>>>> average  problem with Suricata on virtual machines, are you aware
>>>> of this issue?
>>>
>>> No, how can I reproduce it?
>>
>> I think we've seen it before. This is linked with the fact, some low
>> value sleep call are made. There is no problem with them on real
>> computer but it seems some virtualisation solution don't like it.
>>
>> BR,
>> --
>> Eric
>>
> 
> Yes Eric,
> 
> you are correct. I'm using Virtualbox in headless mode, but I'm
> experiencing the same problem with Vmware workstation.
> 
> Phillip
> 

How does it behave if you pass --runmode=autofp to the commandline?

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------