[Oisf-users] Performance Issues

[Cooper F. Nelson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Are you monitoring any IPv6 traffic?

If I remember correctly, the 2.0.1 release had issues with leaking
memory when tracking IPv6 flows.

I'll suggest trying the current dev release and see if that fixes your
issues.

- -Coop

On 10/27/2014 9:43 AM, Yasha Zislin wrote:
> 
> Couple of things about my setup:
> - When Suricata starts, it is using 60 gb of RAM. I've noticed when
> alert count goes down, memory usage is at 105gb.
> - After Suricata service restart, it runs for about a day until alert
> count decreases.
> - All CPUs are kicking and at no stage does any single CPU gets to 100%.
> - I have 20 detection threads per interface.
> - I have 26k ruleset. I know it's big but since I got RAM, I've figured

- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJUTnt7AAoJEKIFRYQsa8FWcvcH/2HnxeYNJmpHQjmnzqM+2IEk
1pq/oOjs0EAgC20vV0hytECwwqJM0ETHM71zVNOJiswlvda+hAhW7MUZiyZ/F88K
ZZAiijRAKGMzZVtE+eR3iUnvn8ccE8P2ZWYrBPBUh+f8bQYiddtjRE9cGbt2iY1P
Z46bem1cxkkobyl8YgmnSNOtTncw/zy4A9vIsDbHnYa0DywR03ZCpHxyEGI5Noqf
5L/VJy9MuzoFVtsanbIi3S+MWsx+iwmBwQC0nwHug5SN0JL3yfBvQ3U6njDp8I5W
jc+jewlVYkRCZt07zKNqlGBWNEzkp2/FEDKd0jBXJmsAvqk+x8oX2oLh2gOr3HQ=
=pYdX
-----END PGP SIGNATURE-----