Flow cleaning with chunked approach is memory hungry
(originally reported y Eric Leblond)
Disabling the chunk approach results in a faster convergence of flow and memory usage during the replay.
It seems the end of the flow hash was not correctly cleaned. See fix: https://github.com/regit/suricata/commit/bb2ee7ef031e74c3c03268470f1fefd96b6adc3a
Affected versions - 6.x / master
Updated by Victor Julien 4 months ago
- Status changed from New to Closed
- Assignee set to Victor Julien
- Target version set to 7.0rc1
https://github.com/OISF/suricata/pull/7534/commits/e9d2417e0ff34f72f824a11f9d840adeeb534256 keeps the chunked approach, but makes the timing much more aggressive based on memuse vs memcaps.