Snort mailing list archives

RE: Re: How can I improve ACID Performance


From: Saad Kadhi <bsdguy () noos fr>
Date: 15 Oct 2001 18:06:21 +0200

On Mon, 2001-10-15 at 16:33, Steve Halligan wrote:
I am no linux expert but I got better
performance after tweaking my openbsd kernel & adding some useful
options. 

Do tell what kernel tweaks you made.  How much performance did it get you?
hum I am looking real hard for the "please" or "would you mind" in the
above sentence but can't see any. so let's do *for this time* a
s/Do/please/ & here are the options I have added:
#### CUSTOM OPTIONS
option NMBCLUSTERS=8192
option NKMEMCLUSTERS=8192
option BUFPAGES=8192
option BUFCACHEPERCENT=25
option MAX_KMAP=120
option MAX_KMAPENT=6000
option SEMMNI=256
option SEMMNS=2048
option SHMMAXPGS=4096

I got these options from Henning Bauer
(http://misc.bsws.de/obsdtuning/webserver.txt) & other posts on
misc () openbsd org. You may get a look in the archives @
http://marc.theaimsgroup.com + man options(4) for their meaning. The
values depend largely on your system hardware/configuration. But the
above are considered quite safe values. As to the how much performance
it got me, I saw a noticeable difference on the loading time
acid_main.php & other underlying pages when I recompiled the kernel with
the above mentioned options. I didn't make any real measurements of the
performance gain. When I saw that the combination of
MySQL/Snort/Apache/ACID/OpenBSD displayed the alerts faster & allowed me
to delete & archive the alerts faster then I was happy & forgot about
this thing. Anyways, if you are looking for some performance
measurement, get a look at:
http://www.darkcore.net/~wangster/benchmarks/
http://innominate.org/~tgr/slides/performance/img0.htm

HTH & do not forget the please next time mate :)
-- 
/saad
[put your signature here]
self-customize-sig(tm). another dumb patent...
nodisclaimer


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: