We are evaluating nprobe, and the results so far look very good. We are
looking for advise on the best method to scale nprobe. We have 3 reasonably
large linux systems - 32 cpu's/68gb of memory each. We get about 150k flows
per second peak, with an avg of about 60k flows per second. So far, we have
been running many nprobe instances (over 100) on the same server to scale.
Nprobe is using very little cpu or memory, which makes me wonder if there is a
better way to scale this, so that one instance can take better advantage of the
resources on the server.
Any advice is appreciated.
We have also trying to export the data to Elastic, but it appears that the
nprobe can't keep up with the data, as it's exporting in very small batches, in
very small sizes. Is there a way to fine-tune how the data is exported?
Thanks.
Scott Bossi
Cyber Threat Operations
Cyber Operations Engineering
Raytheon Company
+1.978.436.3750 business
[email protected]<mailto:[email protected]>
880 Technology Park Drive
Billerica, MA 01821-4164 USA
www.raytheon.com<http://www.raytheon.com>
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
