[Bro] Throughput Problems

Nicholas Weaver nweaver at ICSI.Berkeley.EDU
Tue Mar 11 23:53:24 PDT 2008

	One thing to quickly try is to tune the packet capture on
Linux, as the defaults are pretty bad.


	For the definitive guide.  

The shortcut version is, as root:

echo 33554432 > /proc/sys/net/core/rmem_default
echo 33554432 > /proc/sys/net/core/rmem_max
echo 10000 > /proc/sys/net/core/netdev_max_backlog

	which will temporarily increase the size of the packte capture
buffers to 32 MB, and see if that makes a difference.

Nicholas C. Weaver                               nweaver at icsi.berkeley.edu
     This message has been ROT-13 encrypted twice for higher security.

More information about the Bro mailing list