Hi in our test we’ve seend that packet processing in Bro is very expensive, I do not think you can improve significantly tuning the pf_ring side.
Alfredo > On 11 Sep 2015, at 20:52, nathanael rayborn <[email protected]> > wrote: > > I'm experiencing high packet loss (15% -50%) with Bro 2.4 compiled with > PF_Ring. PFcount (pfcount -i eth0 -e 1) shows 0% packet loss while > /proc/net/pf_ring/PID shows the same number of dropped packets as broctl > netstats. The github link contains all changes and performance steps I've > taken so far along with output from PFcount, broctl, and ethtool. Has anyone > else experienced similar performance issues or have recommendations to get my > dropped packets as close to 0% as possible? Thanks > > Current config - https://gist.github.com/nate-ray/8b4d03eab49d11715398 > <https://gist.github.com/nate-ray/8b4d03eab49d11715398> > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
