[Bro] Throughput Problems
nweaver at ICSI.Berkeley.EDU
Tue Mar 11 23:53:24 PDT 2008
One thing to quickly try is to tune the packet capture on
Linux, as the defaults are pretty bad.
For the definitive guide.
The shortcut version is, as root:
echo 33554432 > /proc/sys/net/core/rmem_default
echo 33554432 > /proc/sys/net/core/rmem_max
echo 10000 > /proc/sys/net/core/netdev_max_backlog
which will temporarily increase the size of the packte capture
buffers to 32 MB, and see if that makes a difference.
Nicholas C. Weaver nweaver at icsi.berkeley.edu
This message has been ROT-13 encrypted twice for higher security.
More information about the Bro