Suricata

As a workaround, I think you could consider using a different `mpm-algo`: hyperscan (hs) is best if it has been compiled in.

You could try `ac-ks` or `ac-bs`.

Victor Julien wrote in #note-1:

As a workaround, I think you could consider using a different `mpm-algo`: hyperscan (hs) is best if it has been compiled in.

You could try `ac-ks` or `ac-bs`.

As a newbie to OPNsense, I think part of the problem was that somehow I created "User Defined" rules (about 500 of them). Since there is no way to delete rules in mass (developer hint), I created a system backup, edited the XML file to pull out all the rules. Then did a factory reset and reloaded the configuration. When I reloaded the config, I also set the "Pattern Matcher" to "Hyperscan" and it seems to be working without issue. It has been up and running for more than 2.5 hours without shutting down the IDS.