Looks like some headway with Suricata and FREEBSD is happening…

[Tantamount]

https://suricata-ids.org/2016/06/07/suricata-3-1rc1-is-out/

"NETMAP usability improvements, especially on FreeBSD"

[ghkrauss]

Does anyone know if this new update of Suricata has addressed the issues of traffic shaping with Suricata in the Inline Mode? Other than CODELQ traffic shaping in the Inline Mode causes Pfsense to lockup on my configuration. This seems to be a Netmap issue. What might be the plans to update the current Suricata package?

[bmeeks]

@ghkrauss:

Does anyone know if this new update of Suricata has addressed the issues of traffic shaping with Suricata in the Inline Mode? Other than CODELQ traffic shaping in the Inline Mode causes Pfsense to lockup on my configuration. This seems to be a Netmap issue. What might be the plans to update the current Suricata package?

Don't know about the first question involving shapers/limiters, but for the update plans I can say we will update pfSense soon after the FreeBSD ports tree is updated with new Suricata (or Snort) versions.  I have been following some of the Netmap fixes in the Suricata source tree.

Bill

[ghkrauss]

Bill:

Thanks for the update. I know it's complex to work on all the moving parts,

Regards,

Howard