[Oisf-users] Performance on multiple CPUs

[Gene Albin]

So I just installed Suricata on one of our research computers with lots of
cores available.  I'm looking to see what kind of performance boost I get as
I bump up the CPU's. After my first run I was surprised to see that I didn't
get much of a boost when going from 8 to 32 CPUs.  I was running a 6GB pcap
file with a about 17k rules loaded.  The first run on 8 cores took 190sec.
The second run on 32 cores took 170 sec.  Looks like something other than
CPU is the bottle neck.

My first guess is Disk IO.  Any recommendations on how I could check/verify
that guess?

Gene

-- 
Gene Albin
gene.albin at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110802/0671f444/attachment-0002.html>