Changes between Version 2 and Version 3 of ToolTricks


Ignore:
Timestamp:
11/25/06 00:10:47 (6 years ago)
Author:
perry
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • ToolTricks

    v2 v3  
    3939 
    4040All tools can write to a network with {{{int:}}}/{{{pcapint:}}}, or to standard out with {{{pcapfile:-}}}/{{{pcap:-}}} 
     41 
     42== Speed up trace processing on a dual processor machine == 
     43On a dual processor machine you can do decompression on one CPU and the trace processing on another.  Having a buffer in between the two will decouple them and get even more cpu usage out of them.  At WAND we use the command line: 
     44{{{ 
     45 zcat tracefile.erf.gz | bfr | ./tool erf:- 
     46}}} 
     47 
     48Doing decompression in a seperate thread is likely to be added to some later release of libtrace.