[Oisf-users] Recommended settings for flow manager/recycler for 1Gbps of traffic

[Peter Manev]

On Tue, May 12, 2015 at 10:33 PM, Brian Keefer <chort at effu.se> wrote:
> I’m planning on doing some testing of EVE-flows logging, working up to implementing it on a box handling full 1Gbps of traffic. I’m currently using 14 worker threads. Are there rough recommendations for how many flow managers and how many flow recyclers to enable?
>

Hi,

There are also other considerations that should be taken into account
(not just the traffic) - you can have a look here:
http://pevma.blogspot.se/2014/08/suricata-flows-flow-managers-and-effect.html

thanks

> --
> bk
>
>
>
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net



-- 
Regards,
Peter Manev