[Oisf-users] Performance on multiple CPUs

Victor Julien victor at inliniac.net
Fri Aug 26 07:54:16 UTC 2011


On 08/25/2011 08:18 PM, Gene Albin wrote:
> Victor,
>   Thanks for the explanation.  So do I understand correctly that for reading
> pcap files I'm limited to only a single packet reader thread?  So at some
> point my performance bottleneck would become the packet reading thread,
> regardless of where the pcap file is stored?  If that's the case I could
> probably use tcpreplay to resend the traffic through the interface and
> pfring (thought I haven't begun to work with pfring yet).

Correct. I don't think there is a sane way to have more pcap file
readers. Replaying seems to be your best option.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------




More information about the Oisf-users mailing list