Hello i have 2 machines i am trying to protect the one from behind i am in inline mode through a gre tunnel
Everything is perfect the attack is getting dropped but i have a error in dmesg
[ 3947.801242] nf_queue: full at 262136 entries, dropping packets(s)
I increased that max-pending to 65534 but that is the limit
Is there anyway i can increase that ?
I have enough ram and cpu free they didn’t use it not even 25% procent of it
The machine where suricata is it have dual cpu with 16c/32t