[Oisf-users] cpu affinity...

[Russell Fulton]

On 24/08/2013, at 1:02 AM, Will Metcalf <william.metcalf at gmail.com> wrote:

> Russell,
> 
> Are you using af_packet or PF_RING?
> 

PR_RING.  I am using the security Onion binaries.

Russell


> Regards,
> 
> Will
> 
> 
> On Wed, Aug 21, 2013 at 7:58 PM, Russell Fulton <r.fulton at auckland.ac.nz> wrote:
> Hi
> 
> I just want to sanity check my config:
> 
>   set-cpu-affinity: yes
>   # Tune cpu affinity of suricata threads. Each family of threads can be bound
>   # on specific CPUs.
>   cpu-affinity:
>     - management-cpu-set:
>         cpu: [ 10 ]  # include only these cpus in affinity settings
>     - receive-cpu-set:
>         cpu: [ 10 ]  # include only these cpus in affinity settings
>     - decode-cpu-set:
>         cpu: [ 10, 11 ]
>         mode: "balanced"
>     - stream-cpu-set:
>         cpu: [ "10-11" ]
>     - detect-cpu-set:
>         cpu: [ "13-15" ]
>         mode: "exclusive" # run detect threads in these cpus
>         # Use explicitely 3 threads and don't compute number by using
>         # detect-thread-ratio variable:
>         # threads: 3
>         prio:
>           low: [ 10 ]
>           medium: [ "11-12" ]
>           high: [ 13 ]
>           default: "medium"
>     - verdict-cpu-set:
>         cpu: [ 10 ]
>         prio:
>           default: "high"
>     - reject-cpu-set:
>         cpu: [ 10 ]
>         prio:
>           default: "low"
>     - output-cpu-set:
>         cpu: [ "all" ]
>         prio:
>            default: "medium"
> 
> top shows
> 
> Cpu10 :  8.5%us,  3.2%sy,  0.0%ni, 86.5%id,  0.0%wa,  0.0%hi,  1.8%si,  0.0%st
> Cpu11 :  5.1%us,  5.1%sy,  0.0%ni, 87.6%id,  0.0%wa,  0.0%hi,  2.2%si,  0.0%st
> Cpu12 :  3.9%us,  8.2%sy,  2.5%ni, 82.5%id,  0.0%wa,  0.0%hi,  2.9%si,  0.0%st
> Cpu13 : 90.7%us,  0.0%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  9.3%si,  0.0%st
> Cpu14 :  9.4%us,  5.8%sy,  0.0%ni, 81.7%id,  0.0%wa,  0.4%hi,  2.9%si,  0.0%st
> Cpu15 :  4.1%us,  5.2%sy,  0.7%ni, 87.4%id,  0.0%wa,  0.0%hi,  2.6%si,  0.0%st
> 
> is this as expected?  I had expected it to balance over 13-15 ?
> 
> I took this from the SO default and added 10 to the CPU numbers.
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
>