Open Information Security Foundation

05/09/2017

01:42 PM Suricata Bug #2100: af_packet: High latency

Yes, the CRIT log message during startup would be very nice and some mention in the docs, so others would not guess t... Igor Novgorodov

12:29 PM Suricata Bug #2100: af_packet: High latency

Yep, it was TPACKET_V3.
I've read somewhere that V3 is experimental, but didn't pay much attention to that.
With TP... Igor Novgorodov

11:13 AM Suricata Bug #2100: af_packet: High latency

Testing with latest git confirms that problem still persists, latency is still about 20ms. Igor Novgorodov

10:46 AM Suricata Bug #2099: af_packet: In IPS mode some some packets are not copied

Just checked out latest master from git, applied the patch.
It didn't applied cleanly, according to commit log, ther... Igor Novgorodov

04/27/2017

10:40 AM Suricata Bug #2099: af_packet: In IPS mode some some packets are not copied

Thanks! i'll try the patch ASAP after i get back from vacation. Igor Novgorodov

04/23/2017

05:22 AM Suricata Bug #2100 (Closed): af_packet: High latency

Same configuration as in https://redmine.openinfosecfoundation.org/issues/2099
Network topology is simple:... Igor Novgorodov

05:03 AM Suricata Bug #2099: af_packet: In IPS mode some some packets are not copied

Update: If i set af_packet's copy-mode to 'tap' then no packets are lost. Igor Novgorodov

04:31 AM Suricata Bug #2099 (Closed): af_packet: In IPS mode some some packets are not copied

Kernel 4.9.24
Suricata 3.2.x or 4.0dev, does not matter.
1 test alert signature.
Testing with TCPReplay's sample... Igor Novgorodov