Thanks! One more quick question... I see there is a "enable_ip_defrag" option for the pf_ring module. Is it better for performance to enable it on the pf_ring driver (assuming I'm running multiple Snort instances on top of DNA/Libzero)?
Thx. Craig -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Luca Deri Sent: Saturday, December 08, 2012 12:12 AM To: [email protected] Subject: Re: [Ntop-misc] ethtool settings Craig I suggest to keep > ethtool -K $1 tso off &>/dev/null > ethtool -K $1 gro off &>/dev/null > ethtool -K $1 lro off &>/dev/null #may not be supported > ethtool -K $1 gso off &>/dev/null the others I don't think are necessary Regards Luca On Dec 7, 2012, at 11:33 PM, Craig Merchant <[email protected]> wrote: > We have a Snort sensor that is running on a 10g Silicom card using > DNA/Libzero. I see in the snortd init script it makes a number of changes to > the NIC using ethtool. Are these the settings that I should be using for > this scenario? > > ethtool -C $1 rx-usecs 1000 &>/dev/null > ethtool -K $1 tso off &>/dev/null > ethtool -K $1 gro off &>/dev/null > ethtool -K $1 lro off &>/dev/null #may not be supported > ethtool -K $1 gso off &>/dev/null > ethtool -K $1 rx off &>/dev/null > ethtool -K $1 tx off &>/dev/null > ethtool -G $1 tx 32768 &>/dev/null > ethtool -G $1 rx 32768 &>/dev/null > ethtool -K $1 sg off &>/dev/null > > Thx. > > Craig > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
