IDS Suricata high pingtime on WAN with high datarate

[jung301084]

Hi,

I have a problem with my IDS/Suricata implementation. There is something wrong while IDS is active on WAN-Port. The Ping-Times getting higher, if I have datarates over 10 Mbit/s. Sometimes it takes over 700 ms. Turning off IDS everything works without problems with high datarates (90-100 Mbit/s).

Does anyone knows whats wrong with it?