Thanks for your reply.
According to your experience, how much memory should be used by suricata with pfring in IDS mode and the traffic at most 10gbps under normal circumstances?
And the pc is intranet environment and with a lot of other process, so is difficult to update kernel.
By the way, which suricata version is appropriate with this kernel(3.10.0)?