High cpu and high capture drops
Hello, I have a puzzling problem!
I increased the number of Linux network cards to two, and configured Suricata to listen on both network cards.The flow has changed from 8g to about 15g.So the CPU becomes very high and the packet loss rate is also very high.
To rule out whether doubling traffic was causing the problem, I disabled one network card and let Suricata listen on only one.but the result is the same.cpu from 800-1500% to 3000-6000%, packet loss rate from<1% into>50%
My linux is centos7.6 72c128g.This happened once before, and no solution was found.Finally, the system was reinstalled and returned to normal