Poor Performance When Using the 'flow' Keyword

Hi!

Thanks for the report. Is it possible for you to share the ruleset file and the following setting in your suricata.yaml?

detect:
  profile: medium
  custom-values:
    toclient-groups: 3
    toserver-groups: 25