[Oisf-users] Suricata IPS with 8 threads
Eric Leblond
eric at regit.org
Wed Jan 4 04:07:34 EST 2012
Hello,
Le mercredi 04 janvier 2012 à 09:22 +0100, Eric Leblond a écrit :
> Hello,
>
> Le mardi 03 janvier 2012 à 14:55 -0800, Hariharan Thantry a écrit :
> > The multiqueue option in Suricata IPS (1.2beta1) seems to have issues
> > when started with 8 threads (and 8 queues for iptables with the
> > queue-balance option). The default of single queue works fine, but
> > with --runmode worker, and no changes to config file (other than
> > loading the changed rules from emerging threats), the engine doesn't
> > seem to be able to forward packets. With a single queue, it works
> > fine. Suricata is running on a bridged setup, with 2 dual-ported 82599
> > NICs, forwarding packets between 2 independent networks. When trying
> > to stop Suricata, I seem to get an error as well:
>
> Thanks for the report, I am able to reproduce it. I will try to fix it
> ASAP.
I've fixed it twice (an indirect fix and a dedicated fix, I've just made
now). Victor Julien should publish a updated git containing the fixes
soon.
Let me know if you want access to my patches.
BR,
--
Eric Leblond
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
Url : http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120104/04898c0a/attachment.bin
More information about the Oisf-users
mailing list