[Oisf-users] Performance on multiple CPUs

Eric Leblond eric at regit.org
Wed Aug 3 06:11:49 UTC 2011


Le mardi 02 août 2011 à 21:47 -0700, Gene Albin a écrit :
> I might have eliminated the disk from the picture.  I realized that I
> have a 12GB ram disk at /dev/shm so I copied my 6GB pcap file and ran
> it from there.  The thought was that if I was reading the pcap from 
> Suricata has tuning parameters for the threading operation; I'd
>recommend reading up on 'em (Will? Wanna jump in 
>         here, since Victor's on vacation?).

WHen you have a consequent number of core, you really should have a look
at the cpu affinity setting in suricata.yaml.

I recommend reading the posts I've made on my blog on the subject: 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110803/6c27136f/attachment.sig>

More information about the Oisf-users mailing list