I am not sure if psad is multi threaded to fully utilize all the cores which you have.
I guess lets wait for the dev to reply :) On 10/29/2012 11:16 PM, Dmitry Korzhevin wrote: > So, no way, to run psad? Maby i can configure iptables rules, to > decrease load? > > 29.10.2012 17:07, Pui Edylie пишет: >> Hi, >> >> You might want to upgrade your processor. >> >> This is what I used here >> >> processor : 7 >> vendor_id : GenuineIntel >> cpu family : 6 >> model : 45 >> model name : Intel(R) Xeon(R) CPU E5-1620 0 @ 3.60GHz >> stepping : 7 >> cpu MHz : 3601.000 >> cache size : 10240 KB >> >> Regards, >> Edy >> >> On 10/29/2012 9:37 PM, Dmitry Korzhevin wrote: >>> processor : 2 >>> vendor_id : GenuineIntel >>> cpu family : 6 >>> model : 45 >>> model name : Intel(R) Xeon(R) CPU E5-2620 0 @ 2.00GHz >>> stepping : 7 >>> cpu MHz : 1999.000 >>> cache size : 15360 KB >>> physical id : 0 >>> siblings : 4 >>> core id : 2 >>> cpu cores : 4 >>> apicid : 2 >>> initial apicid : 2 >>> fpu : yes >>> fpu_exception : yes >>> cpuid level : 13 >>> wp : yes >>> flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge >>> mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx lm >>> constant_tsc arch_perfmon rep_good nonstop_tsc aperfmperf pni >>> pclmulqdq ssse3 cx16 sse4_1 sse4_2 x2apic popcnt aes hypervisor >>> lahf_lm ida arat >>> bogomips : 3998.00 >>> clflush size : 64 >>> cache_alignment : 64 >>> address sizes : 40 bits physical, 48 bits virtual >>> power management: >>> >>> >>> 29.10.2012 12:37, Pui Edylie пишет: >>>> What is your CPU used on this server? >>>> >>>> >>>> On 10/29/2012 5:21 PM, Dmitry Korzhevin wrote: >>>>> Hello, >>>>> >>>>> I have problems with psad. I downloaded latest psad version from >>>>> http://cipherdyne.org/about.html site, and installed from source, on >>>>> Debian 6.0.6 amd64 linux. >>>>> >>>>> I use this manual: >>>>> >>>>> http://www.cyberciti.biz/faq/linux-detect-port-scan-attacks/ >>>>> >>>>> And seems, after i add next iptables rules: >>>>> >>>>> iptables -A INPUT -j LOG >>>>> iptables -A FORWARD -j LOG >>>>> >>>>> system load average starts growing up to 100 LA, and server hangs.. >>>>> >>>>> Btw, this server is used as VPN gateway with about 50 users, i use >>>>> external log for iptables: /var/log/iptables.log >>>>> >>>>> >>>>> Can you please help me - how i can configure psad without such big >>>>> load... >>>>> >>>>> >>>>> >>>>> >>>>> Best Regards, >>>>> Dmitry >>>>> >>>>> --- >>>>> Dmitry KORZHEVIN >>>>> System Administrator >>>>> STIDIA S.A. - Luxembourg >>>>> >>>>> e: dmitry.korzhe...@stidia.com >>>>> m: +38 093 874 5453 >>>>> w: http://www.stidia.com >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------------------------------ >>>>> >>>>> >>>>> >>>>> The Windows 8 Center - In partnership with Sourceforge >>>>> Your idea - your app - 30 days. >>>>> Get started! >>>>> http://windows8center.sourceforge.net/ >>>>> what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/ >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> psad-discuss mailing list >>>>> psad-discuss@lists.sourceforge.net >>>>> https://lists.sourceforge.net/lists/listinfo/psad-discuss >>>> >>> >>> Best Regards, >>> Dmitry >>> >>> --- >>> Dmitry KORZHEVIN >>> System Administrator >>> STIDIA S.A. - Luxembourg >>> >>> e: dmitry.korzhe...@stidia.com >>> m: +38 093 874 5453 >>> w: http://www.stidia.com >>> >> >> > > Best Regards, > Dmitry > > --- > Dmitry KORZHEVIN > System Administrator > STIDIA S.A. - Luxembourg > > e: dmitry.korzhe...@stidia.com > m: +38 093 874 5453 > w: http://www.stidia.com > ------------------------------------------------------------------------------ The Windows 8 Center - In partnership with Sourceforge Your idea - your app - 30 days. Get started! http://windows8center.sourceforge.net/ what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/ _______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
