[Oisf-users] Performance on multiple CPUs

Victor Julien victor at inliniac.net
Tue Aug 23 08:44:30 UTC 2011

On 08/22/2011 10:51 PM, Gene Albin wrote:
> So in that case the I/O becomes the bottleneck?  I've tried to minimize disk
> I/O by putting the pcap file into a ramdisk.  Not sure if that makes a
> difference or not.  (seems to, though)

Disk I/O is one limitation you may run into. Another is whether the
single packet reader thread can distribute the workload over the other
threads/cores fast enough. The best results wrt performance have been
seen in the pfring live modes with multiple reader threads.


Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-users mailing list