"
Hopping on this thread to report asinine CPU usage in the gateway_watcher.php script post-upgrade to 23.7. Configuration did not change from 23.1.There's absolutely no reason this should be using orders of magnitude more CPU time than suricata, ever. Both primary and backup systems show the same behavior.
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages1
#2
Intrusion Detection and Prevention / Re: IPS interferes with internal LAN traffic
December 30, 2020, 03:00:49 PM
This is absolutely a problem with suricata on 20.7. All traffic comes to a standstill in IPS mode, CPU utilization drops to 0% (occasionally enough packets get through to see the CPU graph). I know it's a problem because the exact same system ran 20.1 for a year with suricata in IPS mode with no issues at all. This isn't a performance issue, it's a thread-locking issue or something similar.
Pages1
