This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  a8387f8d6e246ec8d84e113468bb3c4793afad9a (commit)
      from  3c6423cd40c793338836de904a37d42f89d50b5b (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit a8387f8d6e246ec8d84e113468bb3c4793afad9a
Author: Stefan Schantl <stefan.schantl(a)ipfire.org>
Date:   Sun May 19 18:52:23 2019 +0200

    suricata: Limit to a maximum of "16" netfilter queues.
    
    Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 src/initscripts/system/suricata | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

Difference in files:
diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata
index 38b6a40d8..5a567f2d7 100644
--- a/src/initscripts/system/suricata
+++ b/src/initscripts/system/suricata
@@ -6,7 +6,7 @@
 #
 # Author      : Stefan Schantl <stefan.schantl(a)ipfire.org>
 #
-# Version     : 01.01
+# Version     : 01.02
 #
 # Notes       :
 #
@@ -50,7 +50,13 @@ function get_cpu_count {
 		[ "$line" ] && [ -z "${line%processor*}" ]  && ((CPUCOUNT++))
 	done </proc/cpuinfo
 
-	echo $CPUCOUNT
+	# Limit to a maximum of 16 cores, because suricata does not support more than
+	# 16 netfilter queues at the moment.
+	if [ $CPUCOUNT -gt "16" ]; then
+		echo "16"
+	else
+		echo $CPUCOUNT
+	fi
 }
 
 # Function to flush the firewall chains.


hooks/post-receive
--
IPFire 2.x development tree