Hi Paolo, On Monday 11 June 2007, Paolo Lucente wrote: > On Fri, Jun 08, 2007 at 01:12:22PM +0200, Ruben Laban wrote: > > On a more detailed side (and I admit I'm still reading the docs), I am > > wondering about some specific configuration issues. The memory size of > > various pools/buffers/etc in particular. One location has an 100Mbit/s > > uplink and the other 1Gbit/s uplink which is currently throttled to about > > 150-200Mbit/s. I don't have any actual numbers of packets/s, but only > > bytes/s and the fact that most traffic is HTTP. The average usage of both > > lines fluctuates between 20-40 Mbit/s with peaks upto 150Mbit/s for one > > location. > > > > Related to the above is also the performance of pmacct and the load it > > imposes on the machine. The firewalls in question are Dell PE860 machines > > with dual core Xeon's at 3GHz, 1 or 2GB of ram and running Suse Linux > > Enterprise Server 9. > > I see your boxes are pretty beefy, you should not encounter issues of any > sort with it. If you are going the promiscuous mode way, would suggest you > to take a close look to Q5 of FAQS document - which encompasses some tips > both about bufferization and how you can optimize CPU usage while getting > packets off the wire PF_RING/libpcap-mmap/etc.
I will be using it inline (monitoring will be done on our border firewalls), but concerning memory/cpu load I doubt that that would make much of a difference. I'll take another look at the sections concerning the buffering, though last time I had some troubles translating the various tips to actual numbers suited for our scenario. Then again, I guess it pretty much always will require a bit trial and error to find the optimal settings. > You can also search the mailing-list archives regarding a) some numbers the > guys have provided in terms of resources consumption - there has been a > small survey a while ago; b) a recent discussion about pmacct into a > CoLo/hosting environment. I browsed a fair bit of the archives looking for interesting threads. I will have to take another look at them, since I don't recall seeing a thread on resource consumption. Thanks for your time. Regards, Ruben Laban _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
