[Oisf-users] 1Gbps NIDS performance tuning

Cooper F. Nelson cnelson at ucsd.edu
Tue May 20 20:12:01 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

+1 to that.  You want the latest 3-seriers kernel and NIC driver
available.

On 5/20/2014 12:51 PM, Peter Manev wrote:
> 
> Kernel level 2.6.32 is the bare minimum for pf_ring and not usable for
> af_packet with more than one thread.
> For af_packet (with more than one thread usage, aka 12 threads for
> example) it is recommended to use kernel level >= 3.2
> 
> Thanks
> 
> 
> -- 
> Regards,
> Peter Manev
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
> 


- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTe7cRAAoJEKIFRYQsa8FWEjUIAKq26ip9bG3YB8l8Fxl/bY8p
9DsnbSH0H4AYKCMfGoeVOySB/sogSoX40/esKA8c/mW0Zn0gUF4nOm+zxCHT00V6
Im1J8ilv2Jz+3btX1YndjryKIQiqOUYrTHtZF4SXAwlLsc2q6g/fMhuuk5dAwkG0
gkoDr4PcCe7GrFCg5cY6iikK4d1vSK2wXkVNZ1aBGrFJ9uv+VQnMJy1GTmMIIEPG
9lGbSNGPkPXBQ3dXwhG+XHqBbKDS7etNbZ0PQVpsxKgA14soz9gRHDNKUF6I1ZyV
HRQP2VZfAzWVGhSxwEqLHy1yfPmlic4y7TRBcd5tv52i5AMGN/yezOFzJ28rrkM=
=bjJn
-----END PGP SIGNATURE-----



More information about the Oisf-users mailing list