[Oisf-devel] Better PF_RING performance with workers run-mode now instead of autofp

[Martin Holste]

Update: ac with auto has even worse performance.  Seeing 70-80% loss.

On Wed, Jan 11, 2012 at 11:30 AM, Martin Holste <mcholste at gmail.com> wrote:
> Ah, interesting.  I've been using ac-gfbs, though I used to use ac.
> Since I run "full," the memory footprint is much smaller with gfbs.
> We have a ton of RAM, so it's the long startup time that's the biggest
> issue with memory utilization.  I'll flip over to ac with autofp and
> see if we see any difference.
>
> On Wed, Jan 11, 2012 at 1:23 AM, Victor Julien <victor at inliniac.net> wrote:
>> Are you using ac or ac-gfbs? Anoop has been improving both. I think the
>> most significant gain would be when using "ac" "single/auto".
>>
>> On 01/10/2012 11:28 PM, Martin Holste wrote:
>>> I was getting 25-50% missed signature heartbeats (drops) with autofp,
>>> and 1-2% drops now with workers.  In addition, overall CPU is much
>>> lower at 500-750% instead of around 1000% on a 16-CPU box.
>>>
>>> On Tue, Jan 10, 2012 at 2:42 PM, Peter Manev <petermanev at gmail.com> wrote:
>>>> Hi,
>>>> What is the diff percentage wise?  Like 10%,5%?
>>>> What do you mean "performance" - is that less cpu/mem usage or less drops
>>>> or..?
>>>> Just out of curiosity.
>>>> Thanks
>>>>
>>>> On 10 Jan 2012 21:05, "Martin Holste" <mcholste at gmail.com> wrote:
>>>>>
>>>>> Using 7beb5cdf585514c30034f03579f90d179d8fc931 from a few months ago,
>>>>> we had better performance with autofp, but now with
>>>>> f773942ce0eb5fb74d85250b9da9f04bd26f9905, (HEAD as of yesterday) we're
>>>>> seeing much better performance with workers run-mode.  Anyone else
>>>>> experience a shift like this recently?  I can't tell if it was the new
>>>>> bugfix for http_header in server responses or another code addition
>>>>> that changed things, but it's a night-and-day difference now.
>>>>> _______________________________________________
>>>>> Oisf-devel mailing list
>>>>> Oisf-devel at openinfosecfoundation.org
>>>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>>> _______________________________________________
>>> Oisf-devel mailing list
>>> Oisf-devel at openinfosecfoundation.org
>>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>>>
>>
>>
>> --
>> ---------------------------------------------
>> Victor Julien
>> http://www.inliniac.net/
>> PGP: http://www.inliniac.net/victorjulien.asc
>> ---------------------------------------------
>>
>> _______________________________________________
>> Oisf-devel mailing list
>> Oisf-devel at openinfosecfoundation.org
>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel