[Oisf-users] Multiple detect thread
victorserbu2709 at gmail.com
Mon Mar 17 08:29:39 UTC 2014
I have tested suricata in the following setup:
PC1 ---- Server(suricata) --- PC2.
Interfaces of suricata server connected to PC1 and PC2 are part of a
bridge and suricata was configured in IPS mode using NFQ,
runmode=autofp and 6 detect threads.
Then we started an iperf session between PC1 and PC2 and observed that
one of Detect thread ocupy 100% core time. Does suricata can be
configured to use multiple thread of type detect to analyze a single
More information about the Oisf-users