snort3: correct and effective number of packet threads

[Meridoff via Snort-devel <snort-devel () lists snort org>]

Hello,
What is the correct and max performance number of packet processing threads
(specified by -z) for nfq and afapacket modes ?

For example I have a 4-core CPU (got by /proc/cpuinfo) and want to scan 6
interfaces.
What -z should I specify for max performance and CPU loading?

Or reversely: if I have a 6-core CPU and want to scan 4 interfaces. Is it
will be a performance gain if I specify -z 6 ? Or is enough to set z=4

I know that if z = 0 then the number of threads will be equal to the number
of cores.

But for 6 interfaces - is it correct to specify z - 6 , even if the number
of cores is 4 ?

Thanks!

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!