[Oisf-users] Suricata performance tuning

Cooper F. Nelson cnelson at ucsd.edu
Thu Oct 23 15:03:34 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Besides those two links, suricata also benefits from being compiled with
the '-O3' gcc flag.  So, add this to your build script/process:

export CFLAGS="-O3 -pipe -march=native"

- -Coop

On 10/23/2014 6:43 AM, Seb Dooris wrote:
> managed to scrape together a decent machine for my Debian/Suricata build
> 
> 2x Quad Core Opteron 8378 (2.4GHz, 6MB) and 128GB Ram
> 
> Now would there be any good guides on optimising performance around?
> 
> I'll be doing IDS on 2x 1GbE links running about 70% of capacity 
> 
> Thanks
> 
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Training now available: http://suricata-ids.org/training/
> 


- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJUSRjGAAoJEKIFRYQsa8FWtjcIAMNQCc+2zFq3xhb4hii+7v7v
gObNv5+oEJNahnk2a2zGGpJywO7qMzol/4fS6z/Sy/TtkHZSPpj6IH8YUj5LxofK
GyyiewSvbiG3Mmeak4KXDgcNcwpEdn8QP1m10WZ9AtpNVzl1AFJ4eP0Bj89BoMDm
18NLDQN3cjSJOjVBEzFywP/d38M2NztW7yF1S6L7hrFPogjFcWVWj7Ij0PeUS09o
0BSnYalcqQxUmgtg1gdbEikOrkO2K5eTD+SsAnXdlZIQFl/kGTvX6bwurecWhG3+
oEXu2KTq4qom1MB22VQAclYaPnoIEeBO7HKuFzvmoOf6obm+uWf/iMOHEtdFjkA=
=Uja8
-----END PGP SIGNATURE-----



More information about the Oisf-users mailing list