suricata 6.0.0 / 6.0.1 - cpu load (idle) rising compared to 5.0.4

Matthias Fischer matthias.fischer at
Sun Dec 6 10:08:04 UTC 2020


I'd like to have a little problem... ;-)

The other day I saw 'suricata 6.0.0' had its coming out - yesterday it
was '6.0.1'. At that time I thought it might be a good idea to test the
current version.

So I built and tested these two one after another under Core 152/64bit.
I tested 6.0.0 some days ago, 6.0.1 yesterday. 'libhtp' was updated and
installed too, yesterday to 0.5.36.

Both built without problems, both installed without problems, both
showed a strange behavior while running.

Under *each* 6.0.X-version, the cpu load for '/usr/bin/suricata -c
/etc/suricata/suricata.yaml -D -y 0:1' increased in *idle* mode from
~0.5%-2.0% to ~12% compared to 'suricata 5.0.4'.
And I mean it. Idle. Nothing was going on.


Can anyone confirm - or did I miss something?


More information about the Development mailing list