[Oisf-users] Hunting down performance bugs - ioctls

[Victor Julien]

On 12/17/2013 02:42 PM, Mark Ashley wrote:
>               suricata`PrintList+0x4e4
>               suricata`StreamTcpReassembleAppLayer+0x301
>               suricata`StreamTcpReassembleHandleSegmentUpdateACK+0x17b
>               suricata`StreamTcpReassembleHandleSegment+0x1a0
>               suricata`HandleEstablishedPacketToServer+0x1888
>               suricata`StreamTcpPacketStateEstablished+0x20c6
>               suricata`StreamTcpPacket+0x82a
>               suricata`StreamTcp+0x461
>               suricata`TmThreadsSlotVarRun+0xada
>               suricata`TmThreadsSlotProcessPkt+0x61
>               suricata`PcapCallbackLoop+0xd0b
>               libpcap.so.1.5.2`pcap_read_bpf+0x13d
>              2843

PrintList above suggests you've compiled with --enable-debug. This will
be slow no matter what you do. The PrintList above for example iterates
the TCP segment list multiple times per packet I think, or maybe just on
segment insert. Anyhow: slow.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------