[Oisf-users] Suricata - Raspberry Pi

[hkn kyn]

Hello all,

I am currently testing Suricata 4.1.4 on Raspberry Pi 3B+. I am replaying
pcap files with mixed network traffic to Pi and performing intrusion
detection tests. I have replayed the traffic from 50 Mbit/s to 340 Mbit/s
(as it is highest due to shared bus) and I have observed that generated
number of alerts are significantly less at higher data transfer rates even
though there are no packet drops. What may be the reason for this?

Note: Suricata run on autofp mode.

Best regards,
-- 
Hakan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190822/18c8ed85/attachment.html>