[Oisf-users] Recommended settings for flow manager/recycler for 1Gbps of traffic

[Brian Keefer]

On May 12, 2015, at 1:44 PM, Peter Manev <petermanev at gmail.com> wrote:

> On Tue, May 12, 2015 at 10:33 PM, Brian Keefer <chort at effu.se> wrote:
>> I’m planning on doing some testing of EVE-flows logging, working up to implementing it on a box handling full 1Gbps of traffic. I’m currently using 14 worker threads. Are there rough recommendations for how many flow managers and how many flow recyclers to enable?
>> 
> 
> Hi,
> 
> There are also other considerations that should be taken into account
> (not just the traffic) - you can have a look here:
> http://pevma.blogspot.se/2014/08/suricata-flows-flow-managers-and-effect.html

Hello Peter,

Are the number of management threads increased dynamically, based on how many other threads are configured (i.e. if I configure 2 flow managers, does the number of total management threads increase to 4?), or does the number of (flow manager + flow recycler) threads have to be less than the number of management threads?

--
bk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150512/713a2fca/attachment.sig>