[Oisf-users] Massive kernel drops with HTTP traffic

Michael Stone mstone at mathom.us
Fri Aug 17 13:35:33 UTC 2018

On Fri, Aug 17, 2018 at 03:24:31PM +0200, you wrote:
>> Do you have filemagic enabled?
>Yes. We currently use filestore v1. And we use the filemagic value in
>our rules for filestoring.

Unless you have customized the magic file it is very likely that you 
won't hit your performance target this way. I'd suggest rules specific 
to what you're trying to save rather than relying on libmagic (which is 
very inefficient).

Mike Stone

More information about the Oisf-users mailing list