[Bro] Throughput Problems

[Nicholas Weaver]

	One thing to quickly try is to tune the packet capture on
Linux, as the defaults are pretty bad.

	See:
http://www.net.t-labs.tu-berlin.de/research/hppc/

	For the definitive guide.  

The shortcut version is, as root:

echo 33554432 > /proc/sys/net/core/rmem_default
echo 33554432 > /proc/sys/net/core/rmem_max
echo 10000 > /proc/sys/net/core/netdev_max_backlog

	which will temporarily increase the size of the packte capture
buffers to 32 MB, and see if that makes a difference.

-- 
Nicholas C. Weaver                               nweaver at icsi.berkeley.edu
     This message has been ROT-13 encrypted twice for higher security.