[Oisf-devel] Better PF_RING performance with workers run-mode now instead of autofp

[Victor Julien]

Are you using ac or ac-gfbs? Anoop has been improving both. I think the
most significant gain would be when using "ac" "single/auto".

On 01/10/2012 11:28 PM, Martin Holste wrote:
> I was getting 25-50% missed signature heartbeats (drops) with autofp,
> and 1-2% drops now with workers.  In addition, overall CPU is much
> lower at 500-750% instead of around 1000% on a 16-CPU box.
> 
> On Tue, Jan 10, 2012 at 2:42 PM, Peter Manev <petermanev at gmail.com> wrote:
>> Hi,
>> What is the diff percentage wise?  Like 10%,5%?
>> What do you mean "performance" - is that less cpu/mem usage or less drops
>> or..?
>> Just out of curiosity.
>> Thanks
>>
>> On 10 Jan 2012 21:05, "Martin Holste" <mcholste at gmail.com> wrote:
>>>
>>> Using 7beb5cdf585514c30034f03579f90d179d8fc931 from a few months ago,
>>> we had better performance with autofp, but now with
>>> f773942ce0eb5fb74d85250b9da9f04bd26f9905, (HEAD as of yesterday) we're
>>> seeing much better performance with workers run-mode.  Anyone else
>>> experience a shift like this recently?  I can't tell if it was the new
>>> bugfix for http_header in server responses or another code addition
>>> that changed things, but it's a night-and-day difference now.
>>> _______________________________________________
>>> Oisf-devel mailing list
>>> Oisf-devel at openinfosecfoundation.org
>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
> 


-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------