Project

General

Profile

Actions

Bug #1768

closed

packet processing threads doubled

Added by Peter Manev about 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
High
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Using workers mode with both afpacket or pfring with - 3.1dev (rev faf84fe).

If an interface(the only one) is configured with 8 threads in suricata.yaml's afpacket section - example eth2 - when starting Suricata like so:

/usr/local/bin/suricata -c /etc/suricata/suricata.yaml --af-packet=eth2

we get 8 packet processing threads.

If we start suricata like so:

/usr/local/bin/suricata -c /etc/suricata/suricata.yaml --af-packet

we get 16 packet processing threads. This can be observed with pfring as well.

Actions

Also available in: Atom PDF