Actually how much traffic or PPS are you pushing through this box? On 10/29/2012 11:23 PM, Pui Edylie wrote: > I am not sure if psad is multi threaded to fully utilize all the cores > which you have. > > I guess lets wait for the dev to reply :) > > On 10/29/2012 11:16 PM, Dmitry Korzhevin wrote: >> So, no way, to run psad? Maby i can configure iptables rules, to >> decrease load? >> >> 29.10.2012 17:07, Pui Edylie пишет: >>> Hi, >>> >>> You might want to upgrade your processor. >>> >>> This is what I used here >>> >>> processor : 7 >>> vendor_id : GenuineIntel >>> cpu family : 6 >>> model : 45 >>> model name : Intel(R) Xeon(R) CPU E5-1620 0 @ 3.60GHz >>> stepping : 7 >>> cpu MHz : 3601.000 >>> cache size : 10240 KB >>> >>> Regards, >>> Edy >>> >>> On 10/29/2012 9:37 PM, Dmitry Korzhevin wrote: >>>> processor : 2 >>>> vendor_id : GenuineIntel >>>> cpu family : 6 >>>> model : 45 >>>> model name : Intel(R) Xeon(R) CPU E5-2620 0 @ 2.00GHz >>>> stepping : 7 >>>> cpu MHz : 1999.000 >>>> cache size : 15360 KB >>>> physical id : 0 >>>> siblings : 4 >>>> core id : 2 >>>> cpu cores : 4 >>>> apicid : 2 >>>> initial apicid : 2 >>>> fpu : yes >>>> fpu_exception : yes >>>> cpuid level : 13 >>>> wp : yes >>>> flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge >>>> mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx lm >>>> constant_tsc arch_perfmon rep_good nonstop_tsc aperfmperf pni >>>> pclmulqdq ssse3 cx16 sse4_1 sse4_2 x2apic popcnt aes hypervisor >>>> lahf_lm ida arat >>>> bogomips : 3998.00 >>>> clflush size : 64 >>>> cache_alignment : 64 >>>> address sizes : 40 bits physical, 48 bits virtual >>>> power management: >>>> >>>> >>>> 29.10.2012 12:37, Pui Edylie пишет: >>>>> What is your CPU used on this server? >>>>> >>>>> >>>>> On 10/29/2012 5:21 PM, Dmitry Korzhevin wrote: >>>>>> Hello, >>>>>> >>>>>> I have problems with psad. I downloaded latest psad version from >>>>>> http://cipherdyne.org/about.html site, and installed from source, on >>>>>> Debian 6.0.6 amd64 linux. >>>>>> >>>>>> I use this manual: >>>>>> >>>>>> http://www.cyberciti.biz/faq/linux-detect-port-scan-attacks/ >>>>>> >>>>>> And seems, after i add next iptables rules: >>>>>> >>>>>> iptables -A INPUT -j LOG >>>>>> iptables -A FORWARD -j LOG >>>>>> >>>>>> system load average starts growing up to 100 LA, and server hangs.. >>>>>> >>>>>> Btw, this server is used as VPN gateway with about 50 users, i use >>>>>> external log for iptables: /var/log/iptables.log >>>>>> >>>>>> >>>>>> Can you please help me - how i can configure psad without such big >>>>>> load... >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> Best Regards, >>>>>> Dmitry >>>>>> >>>>>> --- >>>>>> Dmitry KORZHEVIN >>>>>> System Administrator >>>>>> STIDIA S.A. - Luxembourg >>>>>> >>>>>> e: dmitry.korzhe...@stidia.com >>>>>> m: +38 093 874 5453 >>>>>> w: http://www.stidia.com >>>>>> >>>>>> >>>>>> >>>>>> ------------------------------------------------------------------------------ >>>>>> >>>>>> >>>>>> The Windows 8 Center - In partnership with Sourceforge >>>>>> Your idea - your app - 30 days. >>>>>> Get started! >>>>>> http://windows8center.sourceforge.net/ >>>>>> what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/ >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> psad-discuss mailing list >>>>>> psad-discuss@lists.sourceforge.net >>>>>> https://lists.sourceforge.net/lists/listinfo/psad-discuss >>>> Best Regards, >>>> Dmitry >>>> >>>> --- >>>> Dmitry KORZHEVIN >>>> System Administrator >>>> STIDIA S.A. - Luxembourg >>>> >>>> e: dmitry.korzhe...@stidia.com >>>> m: +38 093 874 5453 >>>> w: http://www.stidia.com >>>> >>> >> Best Regards, >> Dmitry >> >> --- >> Dmitry KORZHEVIN >> System Administrator >> STIDIA S.A. - Luxembourg >> >> e: dmitry.korzhe...@stidia.com >> m: +38 093 874 5453 >> w: http://www.stidia.com >> > > > ------------------------------------------------------------------------------ > The Windows 8 Center - In partnership with Sourceforge > Your idea - your app - 30 days. > Get started! > http://windows8center.sourceforge.net/ > what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/ > _______________________________________________ > psad-discuss mailing list > psad-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/psad-discuss
------------------------------------------------------------------------------ The Windows 8 Center - In partnership with Sourceforge Your idea - your app - 30 days. Get started! http://windows8center.sourceforge.net/ what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/ _______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
