<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hello Victor<div><br></div><div>Apologies for the delay in response. I did not have access to my setup till now. Please find the requested data below</div><div><br></div><div>DUT - </div><div>Distro: CentOS</div><div>Kernel : 4.14.62-2.v7.x86_64</div><div>This is Intel I350 4-port Gigabit NIC and I am using 2 ports for my testing connected to two ports of the box running TRex.</div><div><br></div><div><div>This is a gen7 CPU and I have used RPS:</div><div><div>echo 4 > /sys/class/net/enp1s0f2/queues/rx-0/rps_cpus</div><div>echo 2 > /sys/class/net/enp1s0f3/queues/rx-0/rps_cpus</div></div></div><div><br></div><div>I have disabled NIC offloading as per the Septun doc, stopped irqbalance, and pinned interrupts to different cores. I can see that the right queues are being used for my packets in /proc/interrupts.</div><div><br></div><div>My AF-Packet config is below:</div><div>- interface: enp1s0f2<br></div><div><div> cluster-id: 99</div><div> cluster-type: cluster_flow</div><div> defrag: yes</div><div> use-mmap: yes</div><div> tpacket-v3: yes</div><div> ring-size: 400000</div><div> block-size: 393216</div></div><div><br></div><div>On Trex, currently I am using the configuration in the package (avl/sfr_delay_10_1g_asa_nat.yaml). I have modified this file to generate a traffic of 150Mbps by using only a couple of pcaps from this file and adjusting their cps. I have 255 clients and 10 servers.</div><div><br></div><div>Few stats from my last run. Please note that I do have other services running as well on the system which are using the CPU which would explain the kernel_drops.</div><div><div><div>capture.kernel_packets | Total | 75591077</div><div>capture.kernel_drops | Total | 4410661</div><div>tcp.pkt_on_wrong_thread | Total | 29509415</div></div></div><div><br></div><div>Kindly let me know if you need any more details.</div><div><br></div><div>Many thanks</div><div>Nidhi.</div><div><br></div><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_quote">
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 23 Nov 2018 16:14:40 +0100<br>
From: Victor Julien <<a href="mailto:lists@inliniac.net" target="_blank">lists@inliniac.net</a>><br>
To: <a href="mailto:oisf-users@lists.openinfosecfoundation.org" target="_blank">oisf-users@lists.openinfosecfoundation.org</a><br>
Subject: Re: [Oisf-users] Benchmark testing with Trex<br>
Message-ID: <<a href="mailto:e30943f3-1955-803f-1546-df9b3be31a05@inliniac.net" target="_blank">e30943f3-1955-803f-1546-df9b3be31a05@inliniac.net</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
Hi Nidhi,<br>
<br>
On 15-11-18 18:28, Nidhi V Singhai wrote:<br>
> I am collecting some suricata performance figures for my setup and am<br>
> using Trex for traffic replay. I am using standard trex profiles with<br>
> mostly http/https traffic currently. With suricata 4.1, I am observing<br>
> around 50% of the packets on wrong thread. I have a dual core system<br>
> with HT. I have disabled NIC offloading and set single rx/tx queues for<br>
> my interfaces. There are no capture drops registered. Has anyone else<br>
> tried suricata with trex? Can someone please suggest what might be the<br>
> cause of packets on wrong thread and how to avoid it?<br>
<br>
At Suricon18 Joe's talk dealt with trex testing, however he did not test<br>
4.1 yet. So the 'wrong thread' counters weren't yet available. He is<br>
planning to repeat the testing, so we maybe we will learn whether he<br>
will run into the same.<br>
<br>
Can you give some more details on your setup? Distro, kernel, ethtool<br>
output, hardware, afpacket section of your yaml, etc?<br>
<br>
Also things like trex setup would be useful.<br>
<br>
Thanks!<br>
Victor<br>
<br>
-- <br>
---------------------------------------------<br>
Victor Julien<br>
<a href="http://www.inliniac.net/" rel="noreferrer" target="_blank">http://www.inliniac.net/</a><br>
PGP: <a href="http://www.inliniac.net/victorjulien.asc" rel="noreferrer" target="_blank">http://www.inliniac.net/victorjulien.asc</a><br>
---------------------------------------------<br>
<br>
<br><br>
</div></div>
</blockquote></div></div></div></div></div></div></div></div></div></div></div></div>