[Oisf-users] Suricata performance tweaks

[Cooper F. Nelson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Step 1.  Disable all offloading features on your NIC.

Step 2.  Follow this guide:

https://home.regit.org/2012/07/suricata-to-10gbps-and-beyond/

Start with that and if you still run into performance issues let us know.

- -Coop

On 2/8/2015 7:10 AM, Seb Dooris wrote:
> Looking to monitor (IDS) my ~2Gbp/s line with the following.
> 
> Suricata 2.1beta2
> 4x Quad-Core AMD Opterons 8384 @ 2.7G
> Intel x520DA/SFP+ Network Card
> 128GB Ram
> ETOpen Ruleset 
> 
> I'm quite new to Suri so would appreciate any advice people can give as
> to the appropriate config. 
> 
> Tnx
> 
> 
> -- 
> PGP Key ID: 0x6ef918f836cb8010
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Training now available: http://suricata-ids.org/training/
> 


- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJU130OAAoJEKIFRYQsa8FWubsH/jm2hZ5PsCEwKWk4UEY8T/Cq
x0FYATQl6dkj0tzg3c/Z5I8oq8MDkKn1Tp8Und7UrUIIV9rgPJ4Jt8xrfwGUYmpX
0dTyRO0vNfzx44CihshqcDh4nl1z1n9Bls2DHjvChV37oAQWUNDxQo9ssNOdAp4z
7y48lm1rZftdMuD4Tf7qb58O2T4OHF7BjWj969nVMSYZcWkUQHLK0nf6F6peFnyI
3sWiApKnWqdIYi9m7W9DJkeE3mc2uABP9N5SPB7MXgvBMlO66advvxr8iYZvRehP
Krl5shDG9PFnOI2g3W3oXJyVT8qVfH55jMKjcKxXwEuBaDYAoS/RJkpnd/YqM6s=
=se3S
-----END PGP SIGNATURE-----