[Bro-Dev] Running bro with newer 10 GigE cards that Coalesce packeets in the hardware

[William Jones]

Gather scatter is the official term.   It is  on by default on the bmc 10 GigE cards. 

-----Original Message-----
From: Seth Hall [mailto:seth at icir.org] 
Sent: Sunday, May 08, 2011 9:32 PM
To: William Jones
Cc: Bro Dev
Subject: Re: [Bro-Dev] Running bro with newer 10 GigE cards that Coalesce packeets in the hardware


On May 8, 2011, at 10:11 PM, William Jones wrote:

> This takes many packets and presents them to bro as one very large packet 10K.  
> Can anyone think of any down side to running bro with packet coalescing nic's.    


I think I'm lost.  At first I thought you were talking about interrupt coalescing (which shouldn't cause any changes), but now I'm not so sure.  Can you point me to documentation for your packet coalescing NIC and the setting you're changing in your operating system to enable it?

Thanks,
  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/