https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022022-02-13T20:43:03ZOpen Information Security FoundationSuricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=223212022-02-13T20:43:03ZVictor Julienvictor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Assigned</i></li><li><strong>Assignee</strong> set to <i>Victor Julien</i></li></ul> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=223362022-02-14T16:33:56ZVictor Julienvictor@inliniac.net
<ul><li><strong>Assignee</strong> changed from <i>Victor Julien</i> to <i>Jason Ish</i></li><li><strong>Target version</strong> set to <i>7.0.0-beta1</i></li><li><strong>Label</strong> <i>Needs backport to 5.0, Needs backport to 6.0</i> added</li></ul> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=223442022-02-16T17:57:45ZJason Ishjason.ish@oisf.net
<ul></ul><p>Suricata appears to enter this condition when the parser enters a state when it considers the SMB messages to be in an overflow state. The extra CPU usage is seen as we are copying large amount of data just before throwing the data away. However, we can detect this condition before the copy which reduces CPU usage.</p>
<p>6.0.4 appears to have the same problem but its not as apparent due to more efficient buffering.</p>
<p>PR for 5.0.x: <a class="external" href="https://github.com/OISF/suricata/pull/7014">https://github.com/OISF/suricata/pull/7014</a></p> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=223452022-02-16T17:57:57ZJason Ishjason.ish@oisf.net
<ul><li><strong>Status</strong> changed from <i>Assigned</i> to <i>In Review</i></li></ul> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=224182022-02-18T13:54:24ZJeff Lucovsky
<ul><li><strong>Copied to</strong> <i><a class="issue tracker-1 status-5 priority-5 priority-high3 closed" href="/issues/5118">Bug #5118</a>: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()</i> added</li></ul> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=224202022-02-18T13:55:27ZJeff Lucovsky
<ul><li><strong>Copied to</strong> <i><a class="issue tracker-1 status-5 priority-5 priority-high3 closed" href="/issues/5119">Bug #5119</a>: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()</i> added</li></ul> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=228702022-04-04T16:34:26ZJason Ishjason.ish@oisf.net
<ul><li><strong>Target version</strong> changed from <i>7.0.0-beta1</i> to <i>5.0.9</i></li></ul> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=228712022-04-04T16:34:46ZJason Ishjason.ish@oisf.net
<ul><li><strong>Target version</strong> changed from <i>5.0.9</i> to <i>7.0.0-beta1</i></li></ul> Suricata - Bug #4945: smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()https://redmine.openinfosecfoundation.org/issues/4945?journal_id=229912022-04-15T07:57:21ZVictor Julienvictor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>In Review</i> to <i>Closed</i></li></ul><p><a class="external" href="https://github.com/OISF/suricata/pull/7093">https://github.com/OISF/suricata/pull/7093</a></p>