From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: suricata 6.0.2 - cpu load (idle) rising compared to 5.0.X
Date: Tue, 02 Mar 2021 21:28:27 +0000
Message-ID: <1BDC7015-486B-4033-B10F-B047D4524952@ipfire.org>
In-Reply-To: <fdfc93ea-9994-b13c-ad51-0b12ebc54854@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============4814605581016595352=="
List-Id: <development.lists.ipfire.org>

--===============4814605581016595352==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello,

> On 2 Mar 2021, at 19:55, Matthias Fischer <matthias.fischer(a)ipfire.org> w=
rote:
>=20
> Hi,
>=20
> for the records:
>=20
> Today I tested 'suricata 6.0.2' and '5.0.6' on Core 153/x86_64.
>=20
> 'suricata' was activated only on RED with a few rules from
> "EmergingThreats.net".
>=20
> Hardware:
> https://fireinfo.ipfire.org/profile/5f68a6360ffbecb6877dcac75f5b8c8030f43ce8
>=20
> *Nothing* has changed here, CPU load still rises from ~0.7% in idle mode
> to ~7-9% as soon as 'suricata' is started.
>=20
> No further mails or reactions in the suricata forum on Michaels last
> comment (https://redmine.openinfosecfoundation.org/issues/4096#note-29).

Yes, that is very sad. I suppose we won=E2=80=99t get anything.

We can only hope that they are going to replace the affected code in Suricata=
 7. Until then, we are stuck on Suricata 5.

> Should I send an update to '5.0.6' or '6.0.2'? ;-)

Just for 5.0.6, please :)

-Michael

> Best,
> Matthias


--===============4814605581016595352==--