Suricata的性能

 

 　　不多说，直接上干货！

 

　　见官网

https://suricata.readthedocs.io/en/latest/performance/index.html

 

 

 

 

• Docs »
 
• 7. Performance
•  Edit on GitHub

---

7. Performance

• 7.1. Runmodes
  • 7.1.1. Different runmodes
• 7.2. Packet Capture
  • 7.2.1. Load balancing
  • 7.2.2. RSS
  • 7.2.3. Offloading
  • 7.2.4. Recommendations
• 7.3. Tuning Considerations
  • 7.3.1. max-pending-packets: <number>
  • 7.3.2. mpm-algo: <ac|hs|ac-bs|ac-ks>
  • 7.3.3. detect.profile: <low|medium|high|custom>
  • 7.3.4. detect.sgh-mpm-context: <auto|single|full>
• 7.4. Hyperscan
  • 7.4.1. Introduction
  • 7.4.2. Compilation
  • 7.4.3. Using Hyperscan
  • 7.4.4. Ubuntu Hyperscan Installation
    • 7.4.4.1. libboost headers
    • 7.4.4.2. Trusty
    • 7.4.4.3. Hyperscan
• 7.5. High Performance Configuration
• 7.6. Statistics
  • 7.6.1. stats.log file
    • 7.6.1.1. Detecting packet loss
  • 7.6.2. Kernel drops
  • 7.6.3. Tools to plot graphs
• 7.7. Ignoring Traffic
  • 7.7.1. capture filters (BPF)
  • 7.7.2. pass rules
  • 7.7.3. suppress
• 7.8. Packet Profiling
• 7.9. Rule Profiling
• 7.10. Tcmalloc
  • 7.10.1. Installation
  • 7.10.2. Usage