Project

General

Profile

Actions

Bug #7376

open
LS LS

dpdk: delayed detect won't fully start Suricata until the first traffic

Bug #7376: dpdk: delayed detect won't fully start Suricata until the first traffic

Added by Lukas Sismis over 1 year ago. Updated 8 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

With delayed detect a rule reload starts but you will never see the rule reload complete until you actually forward traffic


Subtasks 1 (1 open0 closed)

Bug #7377: dpdk: delayed detect won't fully start Suricata until the first traffic (7.0.x backport)AssignedLukas SismisActions

OT Updated by OISF Ticketbot over 1 year ago Actions #1

  • Subtask #7377 added

OT Updated by OISF Ticketbot over 1 year ago Actions #2

  • Label deleted (Needs backport to 7.0)

LS Updated by Lukas Sismis about 1 year ago Actions #3

  • Status changed from New to Assigned

LS Updated by Lukas Sismis about 1 year ago ยท Edited Actions #4

Trying to reproduce with:
make -j10 && && sudo ./src/suricata -c suricata.yaml.mlx5.4thr -S rules/emerging-all.rules -l /tmp/ --dpdk -vvvv

On the MLX5 card and with delayed-detect enabled, it seems to behave correctly - rules are loaded and Suricata starts successfully.

Edit: also tested without the "-S" runtime option, specified ruleset files in the config and rule reload over the UNIX socket. All seems to start fine.

LS Updated by Lukas Sismis about 1 year ago Actions #5

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

VJ Updated by Victor Julien 10 months ago Actions #6

  • Target version changed from 8.0.0-rc1 to 9.0.0-beta1

LS Updated by Lukas Sismis 8 months ago Actions #7

Will wait for Andreas' re-verification.

Actions

Also available in: PDF Atom