diff --git a/doc/userguide/performance/tuning-considerations.rst b/doc/userguide/performance/tuning-considerations.rst index 5f4fd6ddc3..56194adce0 100644 --- a/doc/userguide/performance/tuning-considerations.rst +++ b/doc/userguide/performance/tuning-considerations.rst @@ -17,7 +17,7 @@ The memory is set up at start and the usage is as follows: number_of.threads X max-pending-packets X (default-packet-size + ~750 bytes) -mpm-algo: +mpm-algo: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Controls the pattern matcher algorithm. AC (``Aho–Corasick``) is the default. @@ -54,7 +54,7 @@ detect.sgh-mpm-context: The multi pattern matcher can have it's context per signature group (full) or globally (single). Auto selects between single and full -based on the **mpm-algo** selected. ac, ac-bs, ac-ks, hs default to "single". +based on the **mpm-algo** selected. ac, ac-ks, hs default to "single". Setting this to "full" with ``mpm-algo: ac`` or ``mpm-algo: ac-ks`` offers better performance. Setting this to "full" with ``mpm-algo: hs`` is not recommended as it leads to much higher startup time. Instead with Hyperscan diff --git a/suricata.yaml.in b/suricata.yaml.in index 35a6558963..30f85068e7 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -1842,7 +1842,6 @@ detect: # # The supported algorithms are: # "ac" - Aho-Corasick, default implementation -# "ac-bs" - Aho-Corasick, reduced memory implementation # "ac-ks" - Aho-Corasick, "Ken Steele" variant # "hs" - Hyperscan, available when built with Hyperscan support #