Possible fix: matching: use a set match for SIDs instead of an array - v1 by jasonish · Pull Request #348 · OISF/suricata-update · GitHub
Reduced my 18 minute test case to 10s of seconds.
Possible fix: matching: use a set match for SIDs instead of an array - v1 by jasonish · Pull Request #348 · OISF/suricata-update · GitHub
Reduced my 18 minute test case to 10s of seconds.