[Oisf-devel] Better PF_RING performance with workers run-mode now instead of autofp

[Martin Holste]

Ah, interesting.  I've been using ac-gfbs, though I used to use ac.
Since I run "full," the memory footprint is much smaller with gfbs.
We have a ton of RAM, so it's the long startup time that's the biggest
issue with memory utilization.  I'll flip over to ac with autofp and
see if we see any difference.

On Wed, Jan 11, 2012 at 1:23 AM, Victor Julien <victor at inliniac.net> wrote:
> Are you using ac or ac-gfbs? Anoop has been improving both. I think the
> most significant gain would be when using "ac" "single/auto".
>
> On 01/10/2012 11:28 PM, Martin Holste wrote:
>> I was getting 25-50% missed signature heartbeats (drops) with autofp,
>> and 1-2% drops now with workers.  In addition, overall CPU is much
>> lower at 500-750% instead of around 1000% on a 16-CPU box.
>>
>> On Tue, Jan 10, 2012 at 2:42 PM, Peter Manev <petermanev at gmail.com> wrote:
>>> Hi,
>>> What is the diff percentage wise?  Like 10%,5%?
>>> What do you mean "performance" - is that less cpu/mem usage or less drops
>>> or..?
>>> Just out of curiosity.
>>> Thanks
>>>
>>> On 10 Jan 2012 21:05, "Martin Holste" <mcholste at gmail.com> wrote:
>>>>
>>>> Using 7beb5cdf585514c30034f03579f90d179d8fc931 from a few months ago,
>>>> we had better performance with autofp, but now with
>>>> f773942ce0eb5fb74d85250b9da9f04bd26f9905, (HEAD as of yesterday) we're
>>>> seeing much better performance with workers run-mode.  Anyone else
>>>> experience a shift like this recently?  I can't tell if it was the new
>>>> bugfix for http_header in server responses or another code addition
>>>> that changed things, but it's a night-and-day difference now.
>>>> _______________________________________________
>>>> Oisf-devel mailing list
>>>> Oisf-devel at openinfosecfoundation.org
>>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>> _______________________________________________
>> Oisf-devel mailing list
>> Oisf-devel at openinfosecfoundation.org
>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>>
>
>
> --
> ---------------------------------------------
> Victor Julien
> http://www.inliniac.net/
> PGP: http://www.inliniac.net/victorjulien.asc
> ---------------------------------------------
>
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel