[Oisf-users] Performance on multiple CPUs

[Eric Leblond]

Hello,

Le mardi 02 août 2011 à 21:47 -0700, Gene Albin a écrit :
> 
> I might have eliminated the disk from the picture.  I realized that I
> have a 12GB ram disk at /dev/shm so I copied my 6GB pcap file and ran
> it from there.  The thought was that if I was reading the pcap from 
...
> Suricata has tuning parameters for the threading operation; I'd
>recommend reading up on 'em (Will? Wanna jump in 
>         here, since Victor's on vacation?).

WHen you have a consequent number of core, you really should have a look
at the cpu affinity setting in suricata.yaml.

I recommend reading the posts I've made on my blog on the subject: 
	http://home.regit.org/?s=thread&searchsubmit=

BR,
--
Eric

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110803/6c27136f/attachment.sig>