I installed suricata on my server and activated about 2000 rules. [image 11] When checking htop, CPU and RAM are free, but packet loss is still occurring. Server Model: PowerEdge R740xd CPU: Intel(R) Xeon(R) Gold 6238 CPU @ 2.10GHz(44 core) RAM: 64 GB NIC: NetXtreme BCM5720 AFPacet … CPU an…

You seem to hit the memcap which could result in drops. If you have some memory left you can increase the memcap value in the config and try again.

Suricata packet loss

suricatalfon (Suricatalfon) April 14, 2021, 10:47am 2

Hello,

See if this discussion can help you: