Suricata

In runmode autofp the calculation of packet processing threads is wrong IMHO. On a system with 16 cores I end up with 32 threads while detect-thread-ratio is set 1.0 (default) and threads:auto in the af-packet section. So it adds 16 due to the ratio and another 16 from the threads setting in the interface af-packet section. If I change threads: 3 for example I end up with 19 (16+3). If I change thread-ratio to 0.5 while threads: auto I end up with 24 (8 from ratio + 16 from threads auto).

So threads: auto in autofp means amount of cores and this will be added. This doesn't happen in runmode workers for example.

Switching affinity off/on doesn't change anything. Also the threads setting within that section doesn't work either, see #3107.