You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/performance
Philippe Antoine e3105a6614 ftp: adds a config option ftp-hash for autofp-scheduler
This allows ftp-data and ftp flows to be processed by the same
thread. Otherwise, there may be a concurrency issue where the
would-be ftp-data flow is first processed, and thus not recognized
as such. And the ftp flow gets processed later and the expectation
coming from it is never found.

To do so, the flow hash gets used as usual, except for flows that
may be either ftp or ftp-data, that is either one port is 21, or
both ports are high ones.

Ticket: #5205
2 years ago
..
analysis
runmodes
analysis.rst
high-performance-config.rst
hyperscan.rst
ignoring-traffic.rst
index.rst
packet-capture.rst
packet-profiling.rst
rule-profiling.rst
runmodes.rst
statistics.rst
tcmalloc.rst
tuning-considerations.rst