=== DATE ===
Sun Nov  8 22:27:22 CET 2026
=== SYSTEM ===
FreeBSD OPNsense.internal 15.1-RELEASE-p6 FreeBSD 15.1-RELEASE-p6 stable/26.7-n284176-c962f76493b6 SMP amd64
15.1-RELEASE-p6
15.1-RELEASE-p6
15.1-RELEASE-p6
=== SURICATA PACKAGE ===
suricata-8.0.8
Name           : suricata
Version        : 8.0.8
Installed on   : Sat Oct 31 01:23:52 2026 CET
Origin         : opnsense/suricata
Architecture   : FreeBSD:15:amd64
Prefix         : /usr/local
Categories     : opnsense security
Licenses       : GPLv2
Maintainer     : franco@opnsense.org
WWW            : https://suricata.io
Comment        : High Performance Network IDS, IPS and Security Monitoring engine
Options        :
	GEOIP          : off
	HYPERSCAN      : on
	IPFW           : on
	LUA            : off
	LUAJIT         : off
	NETMAP         : on
	NSS            : on
	PORTS_PCAP     : off
	PYTHON         : on
	REDIS          : off
	TESTS          : off
Shared Libs required:
	libc.so.7
	libelf.so.2
	libgcc_s.so.1
	libhs.so.5
	libjansson.so.4
	liblz4.so.1
	libm.so.5
	libmagic.so.4
	libnet.so.9
	libnetmap.so.5
	libpcap.so.8
	libpcre2-8.so.0
	librt.so.1
	libthr.so.3
	libyaml-0.so.2
	libz.so.6
Annotations    :
	FreeBSD_version: 1501000
	cpe            : cpe:2.3:a:openinfosecfoundation:suricata:8.0.8:::::freebsd15:x64
	repo_type      : binary
	repository     : OPNsense
Flat size      : 15.0MiB
Description    :
The Suricata Engine is an Open Source Next Generation Intrusion Detection and
Prevention Engine developed by the Open Information Security Foundation (OISF).

This engine is not intended to just replace or emulate the existing tools in
the industry, but will bring new ideas and technologies to the field.

OISF is part of and funded by the Department of Homeland Security's Directorate
for Science and Technology HOST program (Homeland Open Security Technology),
by the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as
through the very generous support of the members of the OISF Consortium.

More information about the Consortium is available, as well as a list of our
current Consortium Members.
=== PROCESSES ===
78429     1 Sat Nov  7 21:29:14 2026   Ss /usr/local/bin/suricata -D --netmap --pidfile /var/run/suricata.pid -c /usr/local/etc/suricata/suricata.yaml
33040 99947 Sun Nov  8 22:27:22 2026   S+ /bin/sh -c P=$(cat /var/run/suricata.pid 2>/dev/null); { echo "=== DATE ==="; date; echo "=== SYSTEM ==="; uname -a; freebsd-version -kru; echo "=== SURICATA PACKAGE ==="; pkg info suricata; echo "=== PROCESSES ==="; ps -axww -o pid,ppid,lstart,stat,command | grep -E "[s]uricata|[p]wait"; if [ -n "$P" ] && kill -0 "$P" 2>/dev/null; then echo "=== SURICATA KERNEL STACKS ==="; procstat -kk "$P"; echo "=== SURICATA OPEN FILES ==="; procstat -f "$P"; fi; echo "=== THREAD CPU ==="; top -H -T -b -n 3 -d 2 | grep -E "PID|suricata|W#01-pppoe0"; echo "=== NETMAP COUNTERS ==="; sysctl dev.netmap.iflib_rx_miss dev.netmap.iflib_rx_miss_bufs; echo "=== ZFS ARC ==="; sysctl kstat.zfs.misc.arcstats.size kstat.zfs.misc.arcstats.data_size kstat.zfs.misc.arcstats.metadata_size kstat.zfs.misc.arcstats.c_max; echo "=== ZFS LOG DATASET ==="; zfs get compression,compressratio,used,logicalused,available zroot/var/log; echo "=== FILESYSTEM ==="; df -h /var/log/suricata; echo "=== SURICATA LOG SIZES ==="; ls -lh /var/log/suricata/suricata_2026110[678].log; } > /root/oisf-suricata-report/05-runtime-diagnostics.txt 2>&1
=== SURICATA KERNEL STACKS ===
  PID    TID COMM                TDNAME              KSTACK                       
78429 100431 suricata            -                   mi_switch+0xbc sleepq_catch_signals+0x27d sleepq_timedwait_sig+0x12 _sleep+0x180 kern_clock_nanosleep+0x24f sys_nanosleep+0x3b amd64_syscall+0x126 fast_syscall_common+0xf8 
78429 103092 suricata            W#01-pppoe0         mi_switch+0xbc sleepq_catch_signals+0x27d sleepq_wait_sig+0x9 _sleep+0x197 umtxq_sleep+0x2cd do_lock_umutex+0x670 __umtx_op_wait_umutex+0x49 sys__umtx_op+0x7e amd64_syscall+0x126 fast_syscall_common+0xf8 
78429 103099 suricata            W#01-pppoe0^        mi_switch+0xbc sleepq_catch_signals+0x27d sleepq_wait_sig+0x9 _sleep+0x197 umtxq_sleep+0x2cd do_lock_umutex+0x670 __umtx_op_wait_umutex+0x49 sys__umtx_op+0x7e amd64_syscall+0x126 fast_syscall_common+0xf8 
78429 103100 suricata            FM#01               mi_switch+0xbc sleepq_catch_signals+0x27d sleepq_timedwait_sig+0x12 _sleep+0x180 umtxq_sleep+0x2cd do_wait+0x258 __umtx_op_wait_uint_private+0x54 sys__umtx_op+0x7e amd64_syscall+0x126 fast_syscall_common+0xf8 
78429 103101 suricata            FR#01               mi_switch+0xbc sleepq_catch_signals+0x27d sleepq_timedwait_sig+0x12 _sleep+0x180 umtxq_sleep+0x2cd do_wait+0x258 __umtx_op_wait_uint_private+0x54 sys__umtx_op+0x7e amd64_syscall+0x126 fast_syscall_common+0xf8 
78429 103102 suricata            CW                  mi_switch+0xbc sleepq_catch_signals+0x27d sleepq_timedwait_sig+0x12 _sleep+0x180 umtxq_sleep+0x2cd do_wait+0x258 __umtx_op_wait_uint_private+0x54 sys__umtx_op+0x7e amd64_syscall+0x126 fast_syscall_common+0xf8 
78429 103103 suricata            CS                  mi_switch+0xbc sleepq_catch_signals+0x27d sleepq_timedwait_sig+0x12 _sleep+0x180 umtxq_sleep+0x2cd do_wait+0x258 __umtx_op_wait_uint_private+0x54 sys__umtx_op+0x7e amd64_syscall+0x126 fast_syscall_common+0xf8 
=== SURICATA OPEN FILES ===
  PID COMM                FD T V FLAGS    REF  OFFSET PRO NAME        
78429 suricata          text v r r-------   -       - -   /usr/local/bin/suricata
78429 suricata           cwd v d r-------   -       - -   /                 
78429 suricata          root v d r-------   -       - -   /                 
78429 suricata             0 v c rw------   3       0 -   /dev/null         
78429 suricata             1 v c rw------   3       0 -   /dev/null         
78429 suricata             2 v c rw------   3       0 -   /dev/null         
78429 suricata             3 s - rw------   1       0 UDD /var/run/log
78429 suricata             4 v r -wa-----   1       0 -   /var/log/suricata/eve.json
78429 suricata             5 v r -wa-----   1  543236 -   /var/log/suricata/stats.log
78429 suricata             6 v c rw------   1       0 -   /dev/netmap       
78429 suricata             7 v c rw------   1       0 -   /dev/netmap       
78429 suricata             8 v c rw------   1       0 -   /dev/netmap       
78429 suricata             9 v c rw------   1       0 -   /dev/netmap       
=== THREAD CPU ===
103099 root        125    0  4112M  1875M CPU5     5 798:20  71.14% suricata{W#01-pppoe0^}
103092 root         59    0  4112M  1875M umtxn    3 800:54  70.95% suricata{W#01-pppoe0}
103092 root        125    0  4112M  1875M CPU6     6 800:56  72.31% suricata{W#01-pppoe0}
103099 root         59    0  4112M  1875M umtxn    2 798:22  70.91% suricata{W#01-pppoe0^}
=== NETMAP COUNTERS ===
dev.netmap.iflib_rx_miss: 46306
dev.netmap.iflib_rx_miss_bufs: 47703
=== ZFS ARC ===
kstat.zfs.misc.arcstats.size: 8496067920
kstat.zfs.misc.arcstats.data_size: 7809711616
kstat.zfs.misc.arcstats.metadata_size: 344950784
kstat.zfs.misc.arcstats.c_max: 15776538624
=== ZFS LOG DATASET ===
NAME           PROPERTY       VALUE           SOURCE
zroot/var/log  compression    lz4             inherited from zroot
zroot/var/log  compressratio  15.95x          -
zroot/var/log  used           421G            -
zroot/var/log  logicalused    6.53T           -
zroot/var/log  available      469G            -
=== FILESYSTEM ===
Filesystem       Size    Used   Avail Capacity  Mounted on
zroot/var/log    890G    421G    469G    47%    /var/log
=== SURICATA LOG SIZES ===
-rwx------  1 root wheel  766G Nov  7 00:00 /var/log/suricata/suricata_20261106.log
-rw-------  1 root wheel  687G Nov  7 21:31 /var/log/suricata/suricata_20261107.log
-rw-------  1 root wheel  589G Nov  8 22:27 /var/log/suricata/suricata_20261108.log
