[Oisf-users] Massive kernel drops with HTTP traffic

[Michael Stone]

On Fri, Aug 17, 2018 at 03:24:31PM +0200, you wrote:
>> Do you have filemagic enabled?
>
>Yes. We currently use filestore v1. And we use the filemagic value in
>our rules for filestoring.

Unless you have customized the magic file it is very likely that you 
won't hit your performance target this way. I'd suggest rules specific 
to what you're trying to save rather than relying on libmagic (which is 
very inefficient).

Mike Stone