I've noticed that whilst ntop (3.2) is receiving a lot of packets, it's
only reporting 71.3% of them as "processed immediately", and none queued.
ntop is only using about 30% of the machine's CPU. Where ought I start
looking to get that 71% up to 100%?
On an identical machine, and identical traffic feed, 3.3rc1 reports 69.8%.
I'm pushing (depending on which machine I believe) peaks of between 90k
and 110k pps into the ntop boxes, with an average of about 25k.
My peak throughput on the monitor link, on a 5 min average is 30.2MB/s
(MegaBytes), average over 24h 15.1MB/s, dips to about 3.5 at lowest.
The hardware is: Dell 1850, dual 3.4G Xeon, 2G ram, 2x146 in a hardware
mirror, and PCI-Express Intel pro/1000 (82541GI) for capture.
I'm using PF_RING, version 3.2.1, linux 2.6.18.
--
ian
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
