Please include the following information with your help request:
Suricata version stable-22.11.2
compiled with dpdk support
I am reporting stats every second for suricata and I am seeing that there are certain seconds that I get no updates in the suricata stats. I have changed the settings for suricata to report each second, instead of every 8 seconds. I think that causes some peaks in the following bytes which leads to higher max bandwidth value (thing that is not really happening).
I am focussing in the Decoder.Bytes field to calculate the bandwidth. In the second image the number of packets is what is being plotted.
Which metric should I use to calculate suricata bandwidth?