inliniac/suricata — pull request #168 by mkeeler (2012-10-31 19:48:56+00:00)
Title: Napatech 3GD - Round 2

I think I have addressed all the comments you had (and upgraded a couple of places)

1 - Fixed thread group name that was too long
2 - General formatting - everything should be indented 4 spaces now.
3 - Moved the opening of the RX stream into the stream loop function to prevent packet loss
4 - Went through and used a lot of unlikely macros to improve branch prediction
5 - Moved error definitions to end of enums
6 - Defaulted locations of 3GD libraries and include path in configure.ac
7 - Updated for using the builtin runmodes (auto, autfp and workers - single mode didn't make sense for nt3gd)
8 - Removed everything from the yaml configuration. Detect thread ratio and number of output threads is left up to the code in util-runmodes.c and the number of streams and their ids are autodetected now.

To get it to use the builtin runmodes I had to go through and register a bunch of live devices, 1 per stream. They aren't actually real devices, but it allowed me to use the system already in place by doing so.

It would appear that the best performing runmode is the autofp. I have tested it with 8x64MB host buffers configured for 8 streams.