From mboxrd@z Thu Jan  1 00:00:00 1970
From: Matthias Fischer <matthias.fischer@ipfire.org>
To: development@lists.ipfire.org
Subject: suricata 6.0.0 / 6.0.1 - cpu load (idle) rising compared to 5.0.4
Date: Sun, 06 Dec 2020 11:08:04 +0100
Message-ID: <16ab4738-cb8c-b61e-3c3c-cae8ab52757d@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============9020150780565888864=="
List-Id: <development.lists.ipfire.org>

--===============9020150780565888864==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hi,

I'd like to have a little problem... ;-)

The other day I saw 'suricata 6.0.0' had its coming out - yesterday it
was '6.0.1'. At that time I thought it might be a good idea to test the
current version.

So I built and tested these two one after another under Core 152/64bit.
I tested 6.0.0 some days ago, 6.0.1 yesterday. 'libhtp' was updated and
installed too, yesterday to 0.5.36.

Both built without problems, both installed without problems, both
showed a strange behavior while running.

Under *each* 6.0.X-version, the cpu load for '/usr/bin/suricata -c
/etc/suricata/suricata.yaml -D -y 0:1' increased in *idle* mode from
~0.5%-2.0% to ~12% compared to 'suricata 5.0.4'.
And I mean it. Idle. Nothing was going on.

Hardware:
https://fireinfo.ipfire.org/profile/5f68a6360ffbecb6877dcac75f5b8c8030f43ce8

Can anyone confirm - or did I miss something?

Best,
Matthias

--===============9020150780565888864==--