[Oisf-users] Testers: please test our initial Hyperscan support

[Peter Manev]

> On 13 May 2016, at 20:31, Cooper F. Nelson <cnelson at ucsd.edu> wrote:
> 
> I still need to filter out top-talkers, but that is more due to memory
> pressure on the flow tracker; vs. CPU time.


But you still do full  tracking right ? (As opposed to using sampling bpf)

> 
>> On 5/13/2016 6:34 AM, Peter Manev wrote:
>> I am seeing an unconditional perf improvement on all live test setups
>> when employing hyperscan with detect.profile: high. as compared to
>> ac-ks/ac.
>> 
>> Cooper - still enjoying tracking full HTTP flows on your set up
>> without challenges?
> 
> 
> -- 
> Cooper Nelson
> Network Security Analyst
> UCSD ITS Security Team
> cnelson at ucsd.edu x41042
>