[Oisf-users] SEPTun and memory usage

erik clark philosnef at gmail.com
Thu Jul 13 11:57:54 UTC 2017

All, trying to find out who has worked with the SEPTun document that can
provide some insight into how much memory they are using to sniff traffic.

We (were) using 8 threads with 200 gigs of ram on a 2.5 Gb/s link. Until
earlier this week, our drop rate was ~2%. I just moved up to 16 threads,
still at 200 gigs of ram, since our throughput moved up a bit to ~3.1Gb/s
and saw a 12% drop rate.

We have 72 cores to work with, and 200 gigs of ram, and just moved to a 4.4
kernel from a modified 3.10 kernel. What seems reasonable on this kind of
hardware? We are limited to an 82598 ixgbe interface with a single link.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170713/73321b66/attachment.html>

More information about the Oisf-users mailing list