[Oisf-users] Suricata, 10k rules, 10Gbit/sec and lots of RAM

Jason Holmes jholmes at psu.edu
Mon Jan 11 21:26:56 UTC 2016


Hi Victor,

That does seem to fix the problem.  I was able to start dev-detect-v174 
with "profile: custom" without it segfaulting.

Thanks!

--
Jason Holmes

On 1/11/16 3:56 PM, Victor Julien wrote:
> On 11-01-16 11:16, Jason Holmes wrote:
>> detect:
>>    profile: custom
>>    custom-values:
>>      toclient-groups: 1000
>>      toserver-groups: 1000
>>
>> (Actually, I had to hardcode this into src/detect-engine.c because the
>> above syntax caused Suricata to crash when starting up.  I didn't dig
>> into it enough to figure out why.)
>
> Can you try https://github.com/inliniac/suricata/pull/1811?
>
> Thanks!
>




More information about the Oisf-users mailing list