[Oisf-users] Workers vs AutoFP with more than 32 cores

[Cooper F. Nelson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

What revision of the Intel NIC driver are you using?

I just noticed they released new drivers at the end of July.

On 9/1/2013 5:58 AM, Tritium Cat wrote:
> The system load is low; packets are only dropped on occasion on a few
> thread/CPUs that hit 100% utilization; most of the CPUs have low
> utilization even with 13500+ rules.  Like I said above at this point I
> think it is just a matter of isolating what rules and traffic flows are the
> worst performing and then tuning/tweaking or shunting that traffic to
> another path/cluster/box.  In doing so I imagine I'll be able to gain more
> performance out of a single box while still leaving enough headroom for
> unexpected behavior.
> 
> HTH and thanks for the help.
> 
> --TC
> 
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
> 


- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSI05VAAoJEKIFRYQsa8FWkCIIAMrygCOO6iaSCk1Cc6Oz0N0h
Z5VV75lt8+yDB9itc/JzFPUnTUXvkwsKCZmopA6vk2VPSxrPAmbwSKUEzXIlcXa5
6i9BfYubIrYuHi8HlA/PotPHtYSQssupTc2PUaluEBpEfOssdteHoW8mbTLdNV01
ba4s3cwJhNFX5pJmUfjrTT/55+qrAuQabI7xnDo1NgTfzVd02YjHEGoSy2cquaYn
XX/JCoNGCkxGup5+M0b8KOQQq0iTdmG0Nl92z3TV3Z488npfd3CO8uAzqrH7i4x/
IOssezyxnXwL3y7KwV7x3+a2l7WU4EjVRvwit4JKPtzKTRdLJk0iPI4y1OEOTDU=
=GU9/
-----END PGP SIGNATURE-----