Project

General

Profile

Actions
Copy link

Support #3368

closed
RS CT

Suricata Pkt processing

Support #3368: Suricata Pkt processing

Added by Rahul Surya over 6 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Community Ticket
Affected Versions:
Label:

Description

I have seen suricata is doing pkt by pkt processing in each run mode(Recv,Decode,Verdict) , can suricata process the pkts in bulk mode like collect pkts from port and process those pkts and again Recv next bulk (conidering all modes running in single core)?

VJ Updated by Victor Julien over 6 years ago Actions
Copy link
 #1

  • Project changed from Suricata-Update to Suricata
  • Assignee deleted (Shivani Bhardwaj)

It is not possible right now. What kind of benefit do you expect?

RS Updated by Rahul Surya over 6 years ago Actions
Copy link
 #2

Just to check performance with single core without running all the increasing the memory constraints in yaml file.

RS Updated by Rahul Surya over 6 years ago Actions
Copy link
 #3

Hey,What the use of FLow locks in Code ,if we are using single core and sequential process of packet through all the modes Decode->Detect->output?

AH Updated by Andreas Herz over 4 years ago Actions
Copy link
 #4

  • Tracker changed from Support to Optimization

VJ Updated by Victor Julien almost 4 years ago Actions
Copy link
 #5

Single mode means we have a single packet thread, but there are still other threads. Esp the flow manager will also access the flow the packet thread(s) may be working on.

VJ Updated by Victor Julien almost 4 years ago Actions
Copy link
 #6

  • Tracker changed from Optimization to Support

PA Updated by Philippe Antoine about 3 years ago Actions
Copy link
 #7

  • Assignee set to Community Ticket

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
 #8

  • Status changed from New to Closed

Closing because of inactivity.

Feel free to reopen a new feature ticket if needed

Actions
Copy link

Also available in: PDF Atom