https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022017-04-13T02:16:05ZOpen Information Security FoundationSuricata - Feature #2092: Improved support for xbits/hostbits - workers runmodehttps://redmine.openinfosecfoundation.org/issues/2092?journal_id=80932017-04-13T02:16:05ZVictor Julienvictor@inliniac.net
<ul></ul><p>Can you be more specific about what this ticket is about? <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Improved support for xbits/hostbits (in particular ip_pair) when running with multiple threads (Closed)" href="https://redmine.openinfosecfoundation.org/issues/1661">#1661</a> has a solution that doesn't apply to workers.</p> Suricata - Feature #2092: Improved support for xbits/hostbits - workers runmodehttps://redmine.openinfosecfoundation.org/issues/2092?journal_id=80952017-04-13T03:33:30ZPeter Manevpetermanev@gmail.com
<ul></ul><p>Following <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Improved support for xbits/hostbits (in particular ip_pair) when running with multiple threads (Closed)" href="https://redmine.openinfosecfoundation.org/issues/1661">#1661</a> - <br />"..The problem is that when using autofp or workers mode there's no guarantee the relevant traffic will all be in the same thread and hence match the xbits..."</p>
<p>So <a class="issue tracker-2 status-5 priority-4 priority-default closed" title="Feature: Improved support for xbits/hostbits (in particular ip_pair) when running with multiple threads (Closed)" href="https://redmine.openinfosecfoundation.org/issues/1661">#1661</a> has an autofp patch but the issue is still valid for workers mode/xbits/ip_pair combination.<br />From previous discussions it seems a possible fix for workers is not trivial - so starting a new tracker for it here.</p> Suricata - Feature #2092: Improved support for xbits/hostbits - workers runmodehttps://redmine.openinfosecfoundation.org/issues/2092?journal_id=81902017-05-03T16:15:28ZAndreas Herzoisf@herzandreas.de
<ul><li><strong>Assignee</strong> set to <i>OISF Dev</i></li><li><strong>Target version</strong> set to <i>TBD</i></li></ul> Suricata - Feature #2092: Improved support for xbits/hostbits - workers runmodehttps://redmine.openinfosecfoundation.org/issues/2092?journal_id=195072021-03-06T08:07:19ZVictor Julienvictor@inliniac.net
<ul><li><strong>Parent task</strong> set to <i>#4380</i></li></ul>