Open Information Security Foundation

02/06/2022

09:52 AM Suricata Bug #2220 (In Review): When running on a single-CPU machine, pcap processing takes a long time

Ralph Broenink

09:51 AM Suricata Bug #2220: When running on a single-CPU machine, pcap processing takes a long time

Though the issues look very similar, the issue described in #2221 is that the socket has a 0.2s read timeout. This is... Ralph Broenink

10/14/2017

04:06 AM Suricata Feature #2222: Batch submission of PCAPs over the socket

Andreas Herz wrote:
> How do you think such a combination should look like? Or do you just want to use *-r /tmp/foob... Ralph Broenink

10/07/2017

07:22 AM Suricata Feature #2223 (Rejected): Log the originating PCAP file in eve.json

Currently, eve.json does not contain the PCAP file that generated events, but does include the packet ID in the pcap.... Ralph Broenink

07:20 AM Suricata Feature #2222 (Closed): Batch submission of PCAPs over the socket

Currently, it is only possible to send a single PCAP file to the socket. A method to send a list of (pcap, output-dir... Ralph Broenink

07:19 AM Suricata Bug #2221 (New): Suricata batch processing slowed down by 0.2s intervals

I was attempting to batch-process a list of PCAPs, (see also issue #2220), I noticed that while submitting PCAPs to S... Ralph Broenink

07:09 AM Suricata Bug #2220 (New): When running on a single-CPU machine, pcap processing takes a long time

I was attempting to batch-process a list of PCAPs, but I noticed the speed was very low on one of my worker machines.... Ralph Broenink