Hi Arturo, just a quick update from me, after doing some test builds earlier today.
>> From the suricata package point of view we rely on some details of >> the current hyperscan debian implementation: >> >> * the hyperscan install-time warning, which will perhaps no longer >> be relevant. > > There is no change in the SSSE3 base dependency with the new 4.4 > release as far as I can read from the source code. > > The fat runtime only ships different optimizations for modern Intel > CPUs (AVX2 etc.) and will probably make the overall performance > better for most users of the debian package. I see. I guess I was hoping for a less performant but more portable generic fall-back implementation but it now seems that the warning is here to stay. >> * we build twice the suricata binary package, with and w/o >> hyperscan support. >> * we diverge the suricata binary at package install time. > >> These things (and some more others) will probably require a spin of >> adjustement from our suricata side regarding hyperscan. Given the >> close dates of the stretch release, what do you think about >> timings? > > As soon as there is a upstream release I will try to update the > hyperscan package promptly and sent you a massage?! FYI, I have tried building the hyperscan package with a current git snapshot from upstream's 'develop' branch [1]. After adding some new build-deps (mostly libsqlite3) and patching out a duplicated Boost header, the package builds fine for 4.4. I have also checked whether the current Suricata in stretch can be built from source against the new Hyperscan version and starts up properly, which is the case. It looks like there probably isn't going to be much friction w.r.t. this new version, assuming that the release won't diverge a lot any more from the current upstream 'develop' branch. I have pushed my experimental packaging code into a '4.4_prerelease' branch [2] if you would like to test it yourself. If there are any additional questions please let me know. Kind regards Sascha [1] https://github.com/01org/hyperscan/tree/develop [2] https://anonscm.debian.org/cgit/collab-maint/hyperscan.git/log/?h=4.4_prerelease
signature.asc
Description: OpenPGP digital signature
