Support #2989
closed
suricata parses lowly in a large traffic
Added by John Smith over 5 years ago.
Updated about 5 years ago.
Description
When suricata in NFQ mode,and I send a large traffic like 3,840kb/s,It shows a very low speed to parse the packages.I use 'ping' and the return time is 2634ms.So is there a good way to solve this problem?
- Assignee deleted (
Victor Julien)
- Target version deleted (
4.1.5)
Please don't set the target version in new tickets.
Can you describe your setup?
- Assignee set to Community Ticket
- Target version set to Support
do I need to change somethings in the suricata.yaml? If suricata in the NFQ mode
John Smith wrote:
do I need to change somethings in the suricata.yaml? If suricata in the NFQ mode
That depends, the only thing necessary is setting the queues when you run suricata (-q parameter).
But without more details about your setup, iptables rules etc. it's hard to tell you what might be the issue.
- Status changed from New to Feedback
- Status changed from Feedback to Closed
Also available in: Atom
PDF