[Oisf-users] more tuning....

[Cooper F. Nelson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you are using workers mode you should run it on all cores regardless.

On 8/20/2014 9:55 PM, Russell Fulton wrote:
> 
> On 21/08/2014, at 2:24 pm, Russell Fulton <r.fulton at auckland.ac.nz> wrote:
> 
>> Top shows 
>>
>> Cpu10 : 44.0%us, 13.9%sy,  1.8%ni, 36.6%id,  0.0%wa,  0.0%hi,  3.7%si,  0.0%st
>> Cpu11 : 65.6%us,  7.7%sy,  1.4%ni, 20.0%id,  0.0%wa,  0.0%hi,  5.3%si,  0.0%st
>> Cpu12 :  1.7%us,  1.7%sy, 92.7%ni,  0.7%id,  0.0%wa,  0.0%hi,  3.3%si,  0.0%st
>> Cpu13 : 95.0%us,  0.3%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  4.7%si,  0.0%st
>> Cpu14 : 93.4%us,  0.7%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  6.0%si,  0.0%st
>> Cpu15 : 94.0%us,  0.7%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  5.3%si,  0.0%st
> 
> Apologies, my bad!
> 
> I was looking at the wrong config file, or more precisely I modified it on the puppet server and for various reasons to failed to get pushed to the sensor.
> 
> Russell
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
> 


- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJT9XyMAAoJEKIFRYQsa8FWKNUH/37pPbBz1hBxMWspXPs43F1K
MLUxejX2j153zny0KSRzyoGy50/3Pv5BzjYaZsznhXeodw3W+mJK6ze3ad6zib4u
SSVvqLe6oHDCUmupTupGm6vgdnmySDdyF+oCPnPA78G36dxgE4wd3AiN84wV6NIj
yJODoNDZ+FRQwkymiEYLJNuLW/D+JlkqfNIdY1lmo5nBV/sGwoSiWF4rE7opku2i
Auakx5opeKZm922uNkfuqqJQH3q1xpCgFqYivuBzfLxbThSP7FeX4UcXQa0Uy12d
IpXi7/tUTPaGBvOU9uFhXJAB6JfF8SH+01RmkwXPqgxjd82kXr/mNFU1FatD7iI=
=43cT
-----END PGP SIGNATURE-----