Posted by Grommish on Jun 24, 2019; 7:46pm
URL: https://itus.accessinnov.com/FIRMWARE-Itus-Networks-Shield-Firmware-Upgrade-WIP-tp1726p1775.html

Well, this is interesting!

With the recently kernel and compile changes that I've made, the speed of the Shield seems to have increased.
I ran a time on Snort loading with just over 15k rules inline afpacket mode on both br-lan and eth0.  I ran it only until the interfaces entered promiscuous mode, then bailed on it.

I also have seen massive updates in network speed, although I'm not sure if it was due to the changes or the fact I recently swapped out a network cable.



15389 Snort rules read
    14955 detection rules
    153 decoder rules
    281 preprocessor rules
15389 Option Chains linked into 1085 Chain Headers


        Command being timed: "snort -Q -i br-lan:eth0 -c /etc/snort/snort.conf"
        User time (seconds): 22.04
        System time (seconds): 1.12
        Percent of CPU this job got: 65%
        Elapsed (wall clock) time (h:mm:ss or m:ss): 0m 35.38s
        Average shared text size (kbytes): 0
        Average unshared data size (kbytes): 0
        Average stack size (kbytes): 0
        Average total size (kbytes): 0
        Maximum resident set size (kbytes): 1692096
        Average resident set size (kbytes): 0
        Major (requiring I/O) page faults: 0
        Minor (reclaiming a frame) page faults: 149188
        Voluntary context switches: 65
        Involuntary context switches: 129
        Swaps: 0
        File system inputs: 0
        File system outputs: 0
        Socket messages sent: 0
        Socket messages received: 0
        Signals delivered: 0
        Page size (bytes): 4096
        Exit status: 0


I didn't get a chance to run a timer on the previous load and I'm not going to go back to try it, but subjectively it seems to be a lot quicker..