From fb1d52f1bdc51357378dc1a069b064fbbfc51623 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Sun, 30 Nov 2025 08:24:09 +0100 Subject: [PATCH] mpm: remove remaining ac-bs references (cherry picked from commit 08d625bb104408430bf5474c8148f23d05a82574) --- doc/userguide/performance/tuning-considerations.rst | 4 ++-- suricata.yaml.in | 1 - 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/doc/userguide/performance/tuning-considerations.rst b/doc/userguide/performance/tuning-considerations.rst index 5f4fd6ddc3..56194adce0 100644 --- a/doc/userguide/performance/tuning-considerations.rst +++ b/doc/userguide/performance/tuning-considerations.rst @@ -17,7 +17,7 @@ The memory is set up at start and the usage is as follows: number_of.threads X max-pending-packets X (default-packet-size + ~750 bytes) -mpm-algo: +mpm-algo: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Controls the pattern matcher algorithm. AC (``Aho–Corasick``) is the default. @@ -54,7 +54,7 @@ detect.sgh-mpm-context: The multi pattern matcher can have it's context per signature group (full) or globally (single). Auto selects between single and full -based on the **mpm-algo** selected. ac, ac-bs, ac-ks, hs default to "single". +based on the **mpm-algo** selected. ac, ac-ks, hs default to "single". Setting this to "full" with ``mpm-algo: ac`` or ``mpm-algo: ac-ks`` offers better performance. Setting this to "full" with ``mpm-algo: hs`` is not recommended as it leads to much higher startup time. Instead with Hyperscan diff --git a/suricata.yaml.in b/suricata.yaml.in index 35a6558963..30f85068e7 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -1842,7 +1842,6 @@ detect: # # The supported algorithms are: # "ac" - Aho-Corasick, default implementation -# "ac-bs" - Aho-Corasick, reduced memory implementation # "ac-ks" - Aho-Corasick, "Ken Steele" variant # "hs" - Hyperscan, available when built with Hyperscan support #