[Oisf-users] cpu affinity...

[Will Metcalf]

Russell,

Are you using af_packet or PF_RING?

Regards,

Will


On Wed, Aug 21, 2013 at 7:58 PM, Russell Fulton <r.fulton at auckland.ac.nz>wrote:

> Hi
>
> I just want to sanity check my config:
>
>   set-cpu-affinity: yes
>   # Tune cpu affinity of suricata threads. Each family of threads can be
> bound
>   # on specific CPUs.
>   cpu-affinity:
>     - management-cpu-set:
>         cpu: [ 10 ]  # include only these cpus in affinity settings
>     - receive-cpu-set:
>         cpu: [ 10 ]  # include only these cpus in affinity settings
>     - decode-cpu-set:
>         cpu: [ 10, 11 ]
>         mode: "balanced"
>     - stream-cpu-set:
>         cpu: [ "10-11" ]
>     - detect-cpu-set:
>         cpu: [ "13-15" ]
>         mode: "exclusive" # run detect threads in these cpus
>         # Use explicitely 3 threads and don't compute number by using
>         # detect-thread-ratio variable:
>         # threads: 3
>         prio:
>           low: [ 10 ]
>           medium: [ "11-12" ]
>           high: [ 13 ]
>           default: "medium"
>     - verdict-cpu-set:
>         cpu: [ 10 ]
>         prio:
>           default: "high"
>     - reject-cpu-set:
>         cpu: [ 10 ]
>         prio:
>           default: "low"
>     - output-cpu-set:
>         cpu: [ "all" ]
>         prio:
>            default: "medium"
>
> top shows
>
> Cpu10 :  8.5%us,  3.2%sy,  0.0%ni, 86.5%id,  0.0%wa,  0.0%hi,  1.8%si,
>  0.0%st
> Cpu11 :  5.1%us,  5.1%sy,  0.0%ni, 87.6%id,  0.0%wa,  0.0%hi,  2.2%si,
>  0.0%st
> Cpu12 :  3.9%us,  8.2%sy,  2.5%ni, 82.5%id,  0.0%wa,  0.0%hi,  2.9%si,
>  0.0%st
> Cpu13 : 90.7%us,  0.0%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  9.3%si,
>  0.0%st
> Cpu14 :  9.4%us,  5.8%sy,  0.0%ni, 81.7%id,  0.0%wa,  0.4%hi,  2.9%si,
>  0.0%st
> Cpu15 :  4.1%us,  5.2%sy,  0.7%ni, 87.4%id,  0.0%wa,  0.0%hi,  2.6%si,
>  0.0%st
>
> is this as expected?  I had expected it to balance over 13-15 ?
>
> I took this from the SO default and added 10 to the CPU numbers.
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130823/9135af73/attachment-0002.html>