[Oisf-users] HTTP Sessions and resource estimation

[Yasha Zislin]

Not sure if this question was already asked or not.Let's say I have pure http traffic (like 99% of the whole traffic). The pipe is 10 gigs but utilization is couple of gigs but it might grow.To my understanding, Suricata inspecting this feed would use most of its memory on HTTP sessions. Is there a way to estimate how much RAM (resources) I would need if throughput and type of traffic is known?

I can definitely provide some config snippets of mine. Just let me know which ones.
Thank you. 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150318/b7f91f90/attachment.html>