[Oisf-users] Optimal Performance for Netmap IPS

[Brandon Reeves]

We have netmap running inline successfully. However after about 10 seconds suricata stops passing traffics between the interfaces in IPS mode (em2-em3)


current config:

Suricata 3.1.1 release

Freebsd 10.3

8 core / 16GB memory / 512GB SSD


Can anyone recommend optimal performance settings for stream etc? We tested the same config with snort/netmap without issue except snort appeared to limit our bandwidth heavily.


Any advice greatly appreciated.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160901/18627c91/attachment.html>