Your exactly right, 40Gbps over 4 bonded 10Gbps interfaces "full-duplex"<br><br>- Josh<br><br><div class="gmail_quote">On Wed, Dec 14, 2011 at 11:44 AM, Martin Holste <span dir="ltr"><<a href="mailto:mcholste@gmail.com">mcholste@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">OMG, I guess I should put that on my Amazon wishlist...<br>
<br>
So how much traffic can you test against it? I wonder if it could<br>
handle 40 Gbit over bonded interfaces.<br>
<div class="HOEnZb"><div class="h5"><br>
On Wed, Dec 14, 2011 at 9:54 AM, Peter Manev <<a href="mailto:petermanev@gmail.com">petermanev@gmail.com</a>> wrote:<br>
> <a href="http://www-03.ibm.com/systems/power/hardware/795/specs.html" target="_blank">http://www-03.ibm.com/systems/power/hardware/795/specs.html</a><br>
><br>
> looks cheap :)<br>
><br>
><br>
> On Wed, Dec 14, 2011 at 4:48 PM, Josh White <<a href="mailto:josh@securemind.org">josh@securemind.org</a>> wrote:<br>
>><br>
>> IBM Power 795<br>
>> Power7 CPU(s) (4.25GHz with so called "Turbocore")<br>
>><br>
>> Memory is a bit lacking compared to an Intel or a cheaper AMD Opteron<br>
>><br>
>> "L2 256KB"<br>
>> "L3 8MB"<br>
>><br>
>> Still I'm anxious to see how it performs.<br>
>><br>
>> Josh<br>
>><br>
>><br>
>><br>
>> On Wed, Dec 14, 2011 at 10:15 AM, Will Metcalf <<a href="mailto:william.metcalf@gmail.com">william.metcalf@gmail.com</a>><br>
>> wrote:<br>
>>><br>
>>> Josh will have to answer for sure but I did see this roaming around<br>
>>> outside of his office building...<br>
>>><br>
>>> <a href="http://yfrog.com/h3puwrp" target="_blank">http://yfrog.com/h3puwrp</a><br>
>>><br>
>>> Regards,<br>
>>><br>
>>> Will<br>
>>> On Wed, Dec 14, 2011 at 8:33 AM, Martin Holste <<a href="mailto:mcholste@gmail.com">mcholste@gmail.com</a>><br>
>>> wrote:<br>
>>> > Holy crap, 128 cores? What is the architecture?<br>
>>> ><br>
>>> > On Wed, Dec 14, 2011 at 1:24 AM, Victor Julien <<a href="mailto:victor@inliniac.net">victor@inliniac.net</a>><br>
>>> > wrote:<br>
>>> >> On 12/10/2011 04:48 PM, Josh White wrote:<br>
>>> >>> Victor,<br>
>>> >>><br>
>>> >>> No reason, just curious. Planning on running a test on a 128 Core /<br>
>>> >>> 256GB<br>
>>> >>> and try pushing things to the maximum limits.<br>
>>> >><br>
>>> >> Thats a lot of cores :) What do the specs look like?<br>
>>> >><br>
>>> >> Let me know if you need guidance/ideas to configure optimally for<br>
>>> >> this.<br>
>>> >><br>
>>> >> Cheers,<br>
>>> >> Victor<br>
>>> >><br>
>>> >>><br>
>>> >>> Thanks for the quick response!<br>
>>> >>><br>
>>> >>> Josh<br>
>>> >>><br>
>>> >>> On Sat, Dec 10, 2011 at 3:19 AM, Victor Julien <<a href="mailto:victor@inliniac.net">victor@inliniac.net</a>><br>
>>> >>> wrote:<br>
>>> >>><br>
>>> >>>> On 12/10/2011 07:35 AM, Josh White wrote:<br>
>>> >>>>> I appear to be hitting a ceiling of 65,000 packets when setting<br>
>>> >>>>> max-pending-packets. If I set it to anything higher, even "66,000"<br>
>>> >>>> Suricata<br>
>>> >>>>> fails to start.<br>
>>> >>>>><br>
>>> >>>>> ---<br>
>>> >>>>> suricata -c /etc/suricata/suricata.yaml -i eth0<br>
>>> >>>>> [3037] 10/12/2011 -- 01:29:11 - (suricata.c:649) <Info> (main) --<br>
>>> >>>>> This is<br>
>>> >>>>> Suricata version 1.1 (rev )<br>
>>> >>>>> [3037] 10/12/2011 -- 01:29:11 - (util-cpu.c:171) <Info><br>
>>> >>>>> (UtilCpuPrintSummary) -- CPUs/cores online: 24<br>
>>> >>>>> [3037] 10/12/2011 -- 01:29:11 - (util-ioctl.c:85) <Info><br>
>>> >>>>> (GetIfaceMTU) --<br>
>>> >>>>> Failure when trying to get MTU via ioctl: 19<br>
>>> >>>>> [3037] 10/12/2011 -- 01:29:11 - (detect-pcre.c:128) <Info><br>
>>> >>>>> (DetectPcreRegister) -- Using PCRE match-limit setting of: 3500<br>
>>> >>>>> [3037] 10/12/2011 -- 01:29:11 - (detect-pcre.c:138) <Info><br>
>>> >>>>> (DetectPcreRegister) -- Using PCRE match-limit-recursion setting<br>
>>> >>>>> of: 1500<br>
>>> >>>>> ---<br>
>>> >>>>><br>
>>> >>>>> Can anyone tell me why? Is this a hard set limit?<br>
>>> >>>><br>
>>> >>>> Yeah it's a hard limit. Our packet pool is a lockless ringbuffer<br>
>>> >>>> that<br>
>>> >>>> can contain USHRT_MAX, so 65535 packets.<br>
>>> >>>><br>
>>> >>>> Any reason to need more?<br>
>>> >>>><br>
>>> >>>> --<br>
>>> >>>> ---------------------------------------------<br>
>>> >>>> Victor Julien<br>
>>> >>>> <a href="http://www.inliniac.net/" target="_blank">http://www.inliniac.net/</a><br>
>>> >>>> PGP: <a href="http://www.inliniac.net/victorjulien.asc" target="_blank">http://www.inliniac.net/victorjulien.asc</a><br>
>>> >>>> ---------------------------------------------<br>
>>> >>>><br>
>>> >>>> _______________________________________________<br>
>>> >>>> Oisf-users mailing list<br>
>>> >>>> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>>> >>>> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
>>> >>>><br>
>>> >>>><br>
>>> >>><br>
>>> >><br>
>>> >><br>
>>> >> --<br>
>>> >> ---------------------------------------------<br>
>>> >> Victor Julien<br>
>>> >> <a href="http://www.inliniac.net/" target="_blank">http://www.inliniac.net/</a><br>
>>> >> PGP: <a href="http://www.inliniac.net/victorjulien.asc" target="_blank">http://www.inliniac.net/victorjulien.asc</a><br>
>>> >> ---------------------------------------------<br>
>>> >><br>
>>> >> _______________________________________________<br>
>>> >> Oisf-users mailing list<br>
>>> >> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>>> >> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
>>> > _______________________________________________<br>
>>> > Oisf-users mailing list<br>
>>> > <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>>> > <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
>>> _______________________________________________<br>
>>> Oisf-users mailing list<br>
>>> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>>> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
>>><br>
>><br>
>><br>
>> _______________________________________________<br>
>> Oisf-users mailing list<br>
>> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
>><br>
><br>
><br>
><br>
> --<br>
> Peter Manev<br>
><br>
> _______________________________________________<br>
> Oisf-users mailing list<br>
> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
><br>
<br>
</div></div></blockquote></div><br>