[Oisf-users] Suricata IPS with 8 threads

[Hariharan Thantry]

Hi Eric,

Thanks. Is it committed to the tree?
If not, can you send me the patch?

Thanks,
Hari

On Wed, Jan 4, 2012 at 1:07 AM, Eric Leblond <eric at regit.org> wrote:
> Hello,
>
> Le mercredi 04 janvier 2012 à 09:22 +0100, Eric Leblond a écrit :
>> Hello,
>>
>> Le mardi 03 janvier 2012 à 14:55 -0800, Hariharan Thantry a écrit :
>> > The multiqueue option in Suricata IPS (1.2beta1) seems to have issues
>> > when started with 8 threads (and 8 queues for iptables with the
>> > queue-balance option). The default of single queue works fine, but
>> > with --runmode worker, and no changes to config file (other than
>> > loading the changed rules from emerging threats), the engine doesn't
>> > seem to be able to forward packets. With a single queue, it works
>> > fine. Suricata is running on a bridged setup, with 2 dual-ported 82599
>> > NICs, forwarding packets between 2 independent networks. When trying
>> > to stop Suricata, I seem to get an error as well:
>>
>> Thanks for the report, I am able to reproduce it. I will try to fix it
>> ASAP.
>
> I've fixed it twice (an indirect fix and a dedicated fix, I've just made
> now). Victor Julien should publish a updated git containing the fixes
> soon.
>
> Let me know if you want access to my patches.
>
> BR,
> --
> Eric Leblond
>