[Oisf-devel] Better PF_RING performance with workers run-mode now instead of autofp

[Martin Holste]

I was getting 25-50% missed signature heartbeats (drops) with autofp,
and 1-2% drops now with workers.  In addition, overall CPU is much
lower at 500-750% instead of around 1000% on a 16-CPU box.

On Tue, Jan 10, 2012 at 2:42 PM, Peter Manev <petermanev at gmail.com> wrote:
> Hi,
> What is the diff percentage wise?  Like 10%,5%?
> What do you mean "performance" - is that less cpu/mem usage or less drops
> or..?
> Just out of curiosity.
> Thanks
>
> On 10 Jan 2012 21:05, "Martin Holste" <mcholste at gmail.com> wrote:
>>
>> Using 7beb5cdf585514c30034f03579f90d179d8fc931 from a few months ago,
>> we had better performance with autofp, but now with
>> f773942ce0eb5fb74d85250b9da9f04bd26f9905, (HEAD as of yesterday) we're
>> seeing much better performance with workers run-mode.  Anyone else
>> experience a shift like this recently?  I can't tell if it was the new
>> bugfix for http_header in server responses or another code addition
>> that changed things, but it's a night-and-day difference now.
>> _______________________________________________
>> Oisf-devel mailing list
>> Oisf-devel at openinfosecfoundation.org
>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel