Hello,

On 2 Mar 2021, at 19:55, Matthias Fischer matthias.fischer@ipfire.org wrote:

Hi,

for the records:

Today I tested 'suricata 6.0.2' and '5.0.6' on Core 153/x86_64.

'suricata' was activated only on RED with a few rules from "EmergingThreats.net".

Hardware: https://fireinfo.ipfire.org/profile/5f68a6360ffbecb6877dcac75f5b8c8030f43ce8

*Nothing* has changed here, CPU load still rises from ~0.7% in idle mode to ~7-9% as soon as 'suricata' is started.

No further mails or reactions in the suricata forum on Michaels last comment (https://redmine.openinfosecfoundation.org/issues/4096#note-29).

Yes, that is very sad. I suppose we won’t get anything.

We can only hope that they are going to replace the affected code in Suricata 7. Until then, we are stuck on Suricata 5.

Should I send an update to '5.0.6' or '6.0.2'? ;-)

Just for 5.0.6, please :)

-Michael

Best, Matthias