Project

General

Profile

Actions

Bug #526

closed

rule reloads: reload never completes with autofp+active packets if low traffic

Added by Victor Julien about 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
High
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Rule reloads require each detect thread to receive packets to fully complete. In a low traffic situation the autofp active packets balancer sends most/all packets to the first thread. This can cause some threads to never receive packets.

Maybe we can send a set of fake packets that are forced to go though each detect thread.

Actions

Also available in: Atom PDF