Default running mode


I have searched through the documentation and i can´t find any explanation about the defaut running mode.

It is said that the option “runmode” is disabled by default. Enabling it, the default running mode is autofp, but prior to enabling this option which runmode Suricata uses?

I noticed that, with “runmode” disabled:

Total Packets - 197251789
Total Drops - 7579873
Average CPU Usage - 20%
Average Memory Usage - 9%

With “runmode” enabled, defaulting to autofp:

Total Packets - 186722423
Total Drops - 76196032
Average CPU Usage - 85%
Average Memory Usage - 91%

1 Like