Nope. I set memory to 256M and tried again.
The following output was taken when downloading a 100MB file. Download speed
was 2MB again.
top - 23:39:02 up 2 min, 1 user, load average: 0.71, 0.44, 0.18
Tasks: 52 total, 3 running, 49 sleeping, 0 stopped, 0 zombie
Cpu(s): 22.6%us, 0.7%sy, 0.0%ni, 4.7%id, 0.0%wa, 19.6%hi, 52.5%si, 0.0%st
Mem: 254944k total, 125920k used, 129024k free, 4220k buffers
Swap: 265064k total, 0k used, 265064k free, 43224k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
3506 root 25 0 72804 49m 1156 R 93.6 20.0 0:27.81 snort
1 root 15 0 1504 556 468 S 0.0 0.2 0:00.20 init
2 root 19 -5 0 0 0 S 0.0 0.0 0:00.00 kthreadd
3 root RT -5 0 0 0 S 0.0 0.0 0:00.00 migration/0
4 root 34 19 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0
5 root RT -5 0 0 0 S 0.0 0.0 0:00.00 watchdog/0
----- Original Message -----
From: "Scott Silva" <[email protected]>
To: [email protected]
Sent: Friday, March 27, 2009 11:19:34 PM GMT +01:00 Amsterdam / Berlin / Bern /
Rome / Stockholm / Vienna
Subject: Re: [Efw-user] Snort CPU load limits download speed
on 3-27-2009 3:02 PM Bart Heinsius spake the following:
>> That's a very small amount of ram. Is it using any swap?
> Nope. Top says:
>
> top - 23:01:40 up 31 days, 2:06, 1 user, load average: 0.10, 0.04, 0.01
> Tasks: 52 total, 2 running, 50 sleeping, 0 stopped, 0 zombie
> Cpu(s): 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
> Mem: 125000k total, 89580k used, 35420k free, 3032k buffers
> Swap: 265064k total, 23460k used, 241604k free, 24452k cached
>
>
OK... When it is at 100% utilization, is it swapping?
The top output above shows a system that is almost completely asleep.
Snort does take a lot of processing power, depending on what is happening. It
has to read every packet looking for its patterns. Most systems running snort
probably need at least 512 mb ram if it is serving more than 1 person. I have
seen systems with a large ruleset needing 2 cores and 2 GB of ram to keep up
with a decent data flow.
------------------------------------------------------------------------------
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user
------------------------------------------------------------------------------
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user
