[Oisf-users] Massive kernel drops with HTTP traffic

Michael Stone mstone at mathom.us
Fri Aug 17 13:21:10 UTC 2018

On Thu, Aug 16, 2018 at 04:00:08PM +0200, you wrote:
>> On 16-08-18 14:49, Konstantin Klinger wrote:
>>> we have some issues with massive capture.kernel_drops (~30-50%) on some
>>> of our high traffic (>5Gbit/s per interface) 4.1.0dev Suricata instances
>>> (af_packet). What we found curious about the issue is that there is no
>>> associated heavy CPU load.
>We have the same problems with 4.0.* stable.

Do you have filemagic enabled? 

Mike Stone

More information about the Oisf-users mailing list