Project

General

Profile

Actions
Copy link

Task #5682

open

tracking: smb performance issues

Added by Victor Julien about 2 years ago. Updated 4 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Victor Julien
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Tracking ticket for SMB performance issues reported by several people.

Targets 8, but will review all fixes for backports to 6 and 7.

Subtasks 7 (2 open — 5 closed)

Bug #4580: smb: large streams can cause large memory moves (memmove)ClosedVictor JulienActions
Optimization #5672: smb: avoid unbounded hash mapsResolvedVictor JulienActions
Optimization #7371: smb: events/counters for caches getting fullNewOISF DevActions
Bug #5781: smb: unbounded file chunk queuing after gapClosedVictor JulienActions
Bug #5791: smb: unbounded file chunk queuing after gap (6.0.x backport)ClosedVictor JulienActions
Optimization #5782: smb: set defaults for file chunk limitsClosedVictor JulienActions
Optimization #5790: smb: set defaults for file chunk limits (6.0.x backport)ClosedVictor JulienActions

Related issues 6 (4 open — 2 closed)

Related to Suricata - Task #5488: Suricon 2022 brainstormAssignedVictor JulienActions
Related to Suricata - Bug #4873: smb: midstream probing check affects performance NewOISF DevActions
Related to Suricata - Bug #5753: smb: convert transaction list to vecdequeClosedPhilippe AntoineActions
Related to Suricata - Optimization #4378: file.data: split mpm per app_protoClosedVictor JulienActions
Related to Suricata - Task #6443: Suricon 2023 brainstormAssignedVictor JulienActions
Related to Suricata - Task #6951: tracking: nfs performance issuesNewVictor JulienActions
Actions
Copy link
 #1

Updated by Victor Julien about 2 years ago

  • Related to Task #5488: Suricon 2022 brainstorm added
Actions
Copy link
 #2

Updated by Victor Julien about 2 years ago

  • Subtask #5672 added
Actions
Copy link
 #3

Updated by Victor Julien about 2 years ago

  • Subtask #4580 added
Actions
Copy link
 #5

Updated by Victor Julien almost 2 years ago

  • Related to Bug #4873: smb: midstream probing check affects performance added
Actions
Copy link
 #6

Updated by Victor Julien almost 2 years ago

  • Related to Bug #5753: smb: convert transaction list to vecdeque added
Actions
Copy link
 #7

Updated by Victor Julien almost 2 years ago

  • Subtask #5781 added
Actions
Copy link
 #8

Updated by Victor Julien almost 2 years ago

  • Subtask #5782 added
Actions
Copy link
 #9

Updated by Victor Julien over 1 year ago

Actions
Copy link
 #10

Updated by Philippe Antoine about 1 year ago

  • Related to Task #6443: Suricon 2023 brainstorm added
Actions
Copy link
 #11

Updated by Victor Julien 12 months ago

  • Status changed from New to Assigned
Actions
Copy link
 #12

Updated by Victor Julien 7 months ago

  • Related to Task #6951: tracking: nfs performance issues added
Actions
Copy link
 #13

Updated by Jeff Lucovsky 6 months ago

Is it possible to do SMB "lite" -- track frames but not all transactions?

Is the expense from the state tracking (name, ...)?

If you want to go deep, would smb "lite" be appropriate?

1. Determine where cost is (time, performance) first and then make decisions.

Actions
Copy link

Also available in: Atom PDF