Open Information Security Foundation

12/15/2020

08:04 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

i was reading https://forum.suricata.io/t/cpu-usage-of-version-6-0-0/706/20
and also other articles in the internet ... Andrew Welham

12/14/2020

11:30 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Peter,
I've done a few more tests on KVM and also Virtual box (on a windows host).
The virtual box did not seem to ... Andrew Welham

12/13/2020

12:59 PM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Any sign of this issue being investigated ?
Andrew Welham

11/06/2020

11:07 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

I don’t know if this helps, Given Junghoran the perf command I tried the following
On a freshly built VM hosted in K... Andrew Welham

08:49 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Apologies I may have caused a little confusion here. The bug was initially detected on live product systems (in a kee... Andrew Welham

11/05/2020

04:24 PM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Yes It behaved the same..
I also tried downloading the source and compiling and the same behaviour happened Andrew Welham

11/04/2020

01:29 PM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

I tried this command to start Suricata ( I think this is IDS mode)
/usr/bin/suricata -c /etc/suricata/suricata.yaml ... Andrew Welham

11/03/2020

09:22 PM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

I don't run suricata in IDS mode, however the screen shots you have seen are on an unconfigured suricata. I just star... Andrew Welham

07:47 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Peter Here you go
I did a Fresh install of Ubuntu 20.04 (on a test VM) and it was fully patched
installed suricat... Andrew Welham

11/02/2020

08:32 PM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Not sure if this helps, suricata is hosted on KVM virtual machines, and the virtual hosts does not look to have high ... Andrew Welham