Bug #382: Suricata uses 100% of CPU on some virtual system - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #382

closed

Suricata uses 100% of CPU on some virtual system

Added by Eric Leblond over 12 years ago. Updated over 12 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Eric Leblond

Target version:

1.2beta1

Affected Versions:

Effort:

Difficulty:

Label:

Description

Due to some call to usleep with low value, suricata causes an important load on some virtual system.

The attached patch fixes the issue but should have some severe implication on performance. Thus it only indicate where to look at.

Files

Download all files

0001-TEST-increase-sleep-time-in-usleep-call.patch (3.77 KB) 0001-TEST-increase-sleep-time-in-usleep-call.patch		Eric Leblond, 11/24/2011 10:31 AM
0001-Flow-use-condition-system-instead-of-short-sleep.patch (6.51 KB) 0001-Flow-use-condition-system-instead-of-short-sleep.patch		Eric Leblond, 11/30/2011 02:34 AM

Actions

Copy link

Updated by Eric Leblond over 12 years ago

Assignee set to Eric Leblond

Actions

Copy link

Updated by Peter Manev over 12 years ago

Eric,

When does this occur? Any specific situation ?
What is your VM setup ? (mem,cpu,os).

Thanks

Actions

Copy link

Updated by Eric Leblond over 12 years ago

File 0001-Flow-use-condition-system-instead-of-short-sleep.patch 0001-Flow-use-condition-system-instead-of-short-sleep.patch added
Status changed from New to Assigned
% Done changed from 0 to 80

Peter,

The problem can be reproduced on a VirtualBox system (Host is a debian sid).

This is linked with a usleep(10) call in the flow manager. I've proposed a patch to Victor and Anoop which are currently reviewing it. The patch is attached to this comment.

Actions

Copy link