[Snort-inline-users] Hi CPU with inline patch against Snort 2.3.3

[<ni...@el...>]

Hi, list
            following is my machine configuration

Intel(R) Celeron(R) CPU 2.00GHz with 128KB cache and intel 10/100Mb NIC...
Memory:- 1GB

The thing is after patching snort 2.3.3 with snort_inline patch... I have
2 different configuration for Stream4

1.) preprocessor stream4: disable_evasion_alerts

In this case my CPU is less than 10 % for a set of traffic

2.) preprocessor stream4: disable_evasion_alerts, stream4inline, memcap
134217728, timeout 3600, midstream_drop_alerts

In this case my CPU hits 50% at specific intervals don't know interval is
random or some specific..... :) with same set of traffic....

Is it due to the inline modifications in stream4 ????

Regards,
Nishit Shah.