{"action":"created","issue":{"url":"https://api.github.com/repos/StamusNetworks/SELKS/issues/136","repository_url":"https://api.github.com/repos/StamusNetworks/SELKS","labels_url":"https://api.github.com/repos/StamusNetworks/SELKS/issues/136/labels{/name}","comments_url":"https://api.github.com/repos/StamusNetworks/SELKS/issues/136/comments","events_url":"https://api.github.com/repos/StamusNetworks/SELKS/issues/136/events","html_url":"https://github.com/StamusNetworks/SELKS/issues/136","id":376858357,"node_id":"MDU6SXNzdWUzNzY4NTgzNTc=","number":136,"title":"TCP reassembly gaps","user":{"login":"Noname2244","id":34089487,"node_id":"MDQ6VXNlcjM0MDg5NDg3","avatar_url":"https://avatars3.githubusercontent.com/u/34089487?v=4","gravatar_id":"","url":"https://api.github.com/users/Noname2244","html_url":"https://github.com/Noname2244","followers_url":"https://api.github.com/users/Noname2244/followers","following_url":"https://api.github.com/users/Noname2244/following{/other_user}","gists_url":"https://api.github.com/users/Noname2244/gists{/gist_id}","starred_url":"https://api.github.com/users/Noname2244/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Noname2244/subscriptions","organizations_url":"https://api.github.com/users/Noname2244/orgs","repos_url":"https://api.github.com/users/Noname2244/repos","events_url":"https://api.github.com/users/Noname2244/events{/privacy}","received_events_url":"https://api.github.com/users/Noname2244/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-11-02T15:30:39Z","updated_at":"2018-11-06T12:39:06Z","closed_at":null,"author_association":"NONE","body":"Could this be a problem?\r\n![image](https://user-images.githubusercontent.com/34089487/47924649-84523c80-debc-11e8-90dc-0dad86625567.png)\r\n\r\ntap interface is a intel NIC with optimizations enabled all offloading disabled etc.\r\nGeneral low cpu and low memory usage.\r\n"},"comment":{"url":"https://api.github.com/repos/StamusNetworks/SELKS/issues/comments/436238480","html_url":"https://github.com/StamusNetworks/SELKS/issues/136#issuecomment-436238480","issue_url":"https://api.github.com/repos/StamusNetworks/SELKS/issues/136","id":436238480,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNjIzODQ4MA==","user":{"login":"pevma","id":1405917,"node_id":"MDQ6VXNlcjE0MDU5MTc=","avatar_url":"https://avatars3.githubusercontent.com/u/1405917?v=4","gravatar_id":"","url":"https://api.github.com/users/pevma","html_url":"https://github.com/pevma","followers_url":"https://api.github.com/users/pevma/followers","following_url":"https://api.github.com/users/pevma/following{/other_user}","gists_url":"https://api.github.com/users/pevma/gists{/gist_id}","starred_url":"https://api.github.com/users/pevma/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pevma/subscriptions","organizations_url":"https://api.github.com/users/pevma/orgs","repos_url":"https://api.github.com/users/pevma/repos","events_url":"https://api.github.com/users/pevma/events{/privacy}","received_events_url":"https://api.github.com/users/pevma/received_events","type":"User","site_admin":false},"created_at":"2018-11-06T12:39:06Z","updated_at":"2018-11-06T12:39:06Z","author_association":"CONTRIBUTOR","body":"There seems to be a  big number of `decoder invalid packets` - if you can do a tcpdump and look into it to see if you see anything odd (example wireshark will complain on  a lot of things). Also check if have vlan tags in the traffic - you could also fetch the last update in `/var/log/suricata/stats.log` and share that here so we can have  a look ?"}}
{"actor":{"display_login":"pevma"}}