Suricata

The unallocated flows are stored as a queue. It would be better to store them on a stack, so that recently freed flows are used more recently than older flows. That way they are more likely to still be in cache.