This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".

The branch, next has been updated via dccbdf5b97130f72b4d0bb26d962ffcda8121a51 (commit) from 2c44da1382dfffb311b15250b9e02784b826dff2 (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit dccbdf5b97130f72b4d0bb26d962ffcda8121a51 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Apr 12 17:59:21 2019 +0100

suricata: Take as much off of the CPU as possible

https://suricata.readthedocs.io/en/suricata-4.1.3/performance/high-performan...

This will compile the ruleset as efficient as possible and allows the IPS to run faster on smaller systems.

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

-----------------------------------------------------------------------

Summary of changes: config/suricata/suricata.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)

Difference in files: diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index f37294d54..3fe78cb2f 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -624,10 +624,10 @@ decoder: # If the argument specified is 0, the engine uses an internally defined # default limit. On not specifying a value, we use no limits on the recursion. detect: - profile: high + profile: custom custom-values: - toclient-groups: 3 - toserver-groups: 25 + toclient-groups: 200 + toserver-groups: 200 sgh-mpm-context: auto inspection-recursion-limit: 3000

hooks/post-receive -- IPFire 2.x development tree