According to trafshow utility: about 6000 PPS
29.10.2012 17:30, Pui Edylie пишет:
Actually how much traffic or PPS are you pushing through this box? On 10/29/2012 11:23 PM, Pui Edylie wrote:I am not sure if psad is multi threaded to fully utilize all the cores which you have. I guess lets wait for the dev to reply :) On 10/29/2012 11:16 PM, Dmitry Korzhevin wrote:So, no way, to run psad? Maby i can configure iptables rules, to decrease load? 29.10.2012 17:07, Pui Edylie пишет:Hi, You might want to upgrade your processor. This is what I used here processor : 7 vendor_id : GenuineIntel cpu family : 6 model : 45 model name : Intel(R) Xeon(R) CPU E5-1620 0 @ 3.60GHz stepping : 7 cpu MHz : 3601.000 cache size : 10240 KB Regards, Edy On 10/29/2012 9:37 PM, Dmitry Korzhevin wrote:processor : 2 vendor_id : GenuineIntel cpu family : 6 model : 45 model name : Intel(R) Xeon(R) CPU E5-2620 0 @ 2.00GHz stepping : 7 cpu MHz : 1999.000 cache size : 15360 KB physical id : 0 siblings : 4 core id : 2 cpu cores : 4 apicid : 2 initial apicid : 2 fpu : yes fpu_exception : yes cpuid level : 13 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx lm constant_tsc arch_perfmon rep_good nonstop_tsc aperfmperf pni pclmulqdq ssse3 cx16 sse4_1 sse4_2 x2apic popcnt aes hypervisor lahf_lm ida arat bogomips : 3998.00 clflush size : 64 cache_alignment : 64 address sizes : 40 bits physical, 48 bits virtual power management: 29.10.2012 12:37, Pui Edylie пишет:What is your CPU used on this server? On 10/29/2012 5:21 PM, Dmitry Korzhevin wrote:Hello, I have problems with psad. I downloaded latest psad version from http://cipherdyne.org/about.html site, and installed from source, on Debian 6.0.6 amd64 linux. I use this manual: http://www.cyberciti.biz/faq/linux-detect-port-scan-attacks/ And seems, after i add next iptables rules: iptables -A INPUT -j LOG iptables -A FORWARD -j LOG system load average starts growing up to 100 LA, and server hangs.. Btw, this server is used as VPN gateway with about 50 users, i use external log for iptables: /var/log/iptables.log Can you please help me - how i can configure psad without such big load... Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhe...@stidia.com m: +38 093 874 5453 w: http://www.stidia.com ------------------------------------------------------------------------------ The Windows 8 Center - In partnership with Sourceforge Your idea - your app - 30 days. Get started! http://windows8center.sourceforge.net/ what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/ _______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discussBest Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhe...@stidia.com m: +38 093 874 5453 w: http://www.stidia.comBest Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhe...@stidia.com m: +38 093 874 5453 w: http://www.stidia.com------------------------------------------------------------------------------ The Windows 8 Center - In partnership with Sourceforge Your idea - your app - 30 days. Get started! http://windows8center.sourceforge.net/ what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/ _______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhe...@stidia.com m: +38 093 874 5453 w: http://www.stidia.com
smime.p7s
Description: Криптографическая подпись S/MIME
------------------------------------------------------------------------------ The Windows 8 Center - In partnership with Sourceforge Your idea - your app - 30 days. Get started! http://windows8center.sourceforge.net/ what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/
_______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
