[Oisf-users] af-packet IPS performance

[cwpark]

Hi 

I 'm tested the af-packet ips mode

(See to https://home.regit.org/2012/09/new-af_packet-ips-mode-in-suricata/)

 

Here is my configuration

CPU ; CPU E5-2680 0 @ 2.70GHz

OS : CentOS 6.2, Kernel-3.12.26

RAM : 16G

NIC : Intel 1G NIC 

Performance test tool : SmartBit

Test packet : 128 length TCP

Suricata-2.0.1

Rules option : almost no rules and full ETPRO License rules

 

Test Result :

1 thread -> no rules : about 38% throughput / full rules : about 9%

16 thread -> no rules : about 41% throughput / full rules : about 10%

 

Could you tell me how to improve the throughput performance.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20140829/43ffa71d/attachment.html>