[Oisf-users] autofp mode performance - high level

[Victor Julien]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/04/2013 02:33 AM, Cooper F. Nelson wrote:
> My experience with trying to run autofp mode against ~5Gbs traffic
> is that the packet acquisition->decode/stream function will not be
> able to process all incoming packets on a single core, even with no
> rules enabled.  I believe when I tried using more than cores 0,1
> (single core w/Hyperthreading) I ran into problems.

Autofp does support using multiple capture threads. You can enable
this in the settings of afpacket, pfring, etc. They have a 'threads'
setting.

- -- 
- ---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
- ---------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlIm2zsACgkQiSMBBAuniMc6GgCdEgIrH9Biq8pCGR3H/FHuoofS
A6AAnA3TZaTqlPccwcxu0GKV8gMo4YnD
=RbnM
-----END PGP SIGNATURE-----