Project

General

Profile

Actions

Feature #3003

open

filestore to uses rename syscall instead of sendfile,which doesn't allow files to be sent across file systems

Added by Cooper Nelson over 2 years ago. Updated about 1 year ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

I would very much like to use tmpfs for the spool dir for the suricata filestore feature to minimize disk I/O and associated thrashing.

However, since suricata uses the 'rename' syscall it doesn't allow the tmp files to be moved across filesystems. So this doesn't work.

If this is changed to use the 'sendfile' syscall it should work.

Actions #1

Updated by Andreas Herz over 2 years ago

  • Tracker changed from Bug to Feature
  • Assignee set to Community Ticket
  • Target version set to TBD
Actions #2

Updated by Victor Julien almost 2 years ago

  • Status changed from New to Assigned
  • Assignee changed from Community Ticket to Jason Ish
  • Target version changed from TBD to 70

Jason can you check if this makes sense to do?

Actions #3

Updated by Victor Julien about 1 year ago

  • Target version changed from 70 to 7.0rc1

Would be good to perf test to see if it has negative effects.

Actions

Also available in: Atom PDF