[Bro] question about intel files

[Seth Hall]

> On Aug 2, 2016, at 10:33 AM, philosnef <philosnef at yahoo.com> wrote:
> 
> We are running pfring with lb_procs=20. We have 40 cores on the box. 

Is that 40 cores with hyper threading or without?  It's possible you're overwhelming the system if 20 of those cores are hyper threaded (this is definitely a guess though since there are so many things that could cause trouble).

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/