Actions
Bug #1081
closed
AG
EL
100% CPU utilization with suricata 2.0 beta2+
Bug #1081:
100% CPU utilization with suricata 2.0 beta2+
Affected Versions:
Effort:
Difficulty:
Label:
Description
Commmit 98e4a14f6d59fe8928fd6e2af3d9c3e8b42d00bf (af-packet: update packet reading loop logic)
breaks suricata in afpacket mode (with workers).
Every worker thread is stuck at 100%.
Reverting this commit makes CPU utilization return to usual levels.
Apparently it seems at least the new check logic introduced by that commit
is buggy:
if (h.h2->tp_status & (TP_STATUS_KERNEL|TP_STATUS_USER_BUSY))
actually becomes
if (h.h2->tp_status & TP_STATUS_USER_BUSY)
because TP_STATUS_KERNEL is defined as 0.
Actions