[Oisf-users] SEPTun and memory usage

[erik clark]

All, trying to find out who has worked with the SEPTun document that can
provide some insight into how much memory they are using to sniff traffic.

We (were) using 8 threads with 200 gigs of ram on a 2.5 Gb/s link. Until
earlier this week, our drop rate was ~2%. I just moved up to 16 threads,
still at 200 gigs of ram, since our throughput moved up a bit to ~3.1Gb/s
and saw a 12% drop rate.

We have 72 cores to work with, and 200 gigs of ram, and just moved to a 4.4
kernel from a modified 3.10 kernel. What seems reasonable on this kind of
hardware? We are limited to an 82598 ixgbe interface with a single link.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170713/73321b66/attachment.html>