path: suricata_1:8.0.3-1/doc/userguide/performance/analysis.rst :: sudo perf top -p $(pidof suricata) If you see specific function calls at the top in red it's a hint that those are path: suricata_1:8.0.3-1/suricata-update/doc/update.rst no change to the output files was made. For example:: --reload-command='sudo kill -USR2 $(pidof suricata)' will tell Suricata to reload its rules. path: suricata_1:8.0.3-1/doc/userguide/rule-management/rule-reload.rst line or from a script/program. Escalation of privileges may be necessary to send the signal. $ kill -USR2 $(pidof suricata) Via the UNIX domain socket