<div>I also just tested this on a dual core intel platform running FC 6.</div>
<div>I get the same exact behavior. In this case I did the following:</div>
<div> </div>
<div>./configure</div>
<div>make </div>
<div>make install</div>
<div>make install-brolite</div>
<div> </div>
<div>( i had to remove the pre-generated parser code as well)</div>
<div> </div>
<div>When I remove loading brolite from the site file I get exceptional performance. </div>
<div> </div>
<div>With brolite enabled it almost appears as if bro does nothing. When I send a test pcap with 30K packets bro is only able to proces 1800. The cpu usage of bro never even gets passed 5%.</div>
<div> </div>
<div>// Joel </div>
<div> </div>
<div> </div>
<div> <br><br></div>
<div class="gmail_quote">On Tue, Mar 11, 2008 at 7:10 PM, Joel Ebrahimi <<a href="mailto:joel.ebrahimi@gmail.com">joel.ebrahimi@gmail.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div>I am running using Suse on PowerPC. I am also using specialty hardware from Bivio.</div>
<div>I do not belive it is an issue with BPF. </div>
<div> </div><font color="#888888">
<div> </div>
<div>// Joel </div></font>
<div>
<div></div>
<div class="Wj3C7c">
<div><br><br> </div>
<div class="gmail_quote">On Tue, Mar 11, 2008 at 5:21 PM, Vern Paxson <<a href="mailto:vern@icir.org" target="_blank">vern@icir.org</a>> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">What OS are you running under? First immediate guess is that your<br>BPF buffers are much too small.<br><font color="#888888"><br>
Vern<br></font></blockquote></div><br></div></div></blockquote></div><br>