Support #3368
open
Added by Rahul Surya over 4 years ago.
Updated 12 months ago.
Description
I have seen suricata is doing pkt by pkt processing in each run mode(Recv,Decode,Verdict) , can suricata process the pkts in bulk mode like collect pkts from port and process those pkts and again Recv next bulk (conidering all modes running in single core)?
- Project changed from Suricata-Update to Suricata
- Assignee deleted (
Shivani Bhardwaj)
It is not possible right now. What kind of benefit do you expect?
Just to check performance with single core without running all the increasing the memory constraints in yaml file.
Hey,What the use of FLow locks in Code ,if we are using single core and sequential process of packet through all the modes Decode->Detect->output?
- Tracker changed from Support to Optimization
Single mode means we have a single packet thread, but there are still other threads. Esp the flow manager will also access the flow the packet thread(s) may be working on.
- Tracker changed from Optimization to Support
- Assignee set to Community Ticket
Also available in: Atom
PDF