Added by Rahul Surya over 6 years ago. Updated almost 2 years ago.
Description
I have seen suricata is doing pkt by pkt processing in each run mode(Recv,Decode,Verdict) , can suricata process the pkts in bulk mode like collect pkts from port and process those pkts and again Recv next bulk (conidering all modes running in single core)?
It is not possible right now. What kind of benefit do you expect?
Just to check performance with single core without running all the increasing the memory constraints in yaml file.
Hey,What the use of FLow locks in Code ,if we are using single core and sequential process of packet through all the modes Decode->Detect->output?
Single mode means we have a single packet thread, but there are still other threads. Esp the flow manager will also access the flow the packet thread(s) may be working on.
Closing because of inactivity.
Feel free to reopen a new feature ticket if needed