[Oisf-users] Throttling System Utilization

[Digital Ninja]

Hello all,

I am toying around with suricata 1.4's metadata logging functionality (http
& tls) from offline packet capture and seem to be encountering problems
with it clobbering my (64GB RAM/12C) system that's otherwise sitting around
10% utilization.  I've tried turning off all outputs except the two
mentioned above, set detect-thread-ratio to .1 and there are no rules
loaded.  Memory settings are all in the 32-64mb range.

Can someone recommend any additional configuration settings for throttling
CPU utilization?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130131/8987aee4/attachment.html>