Hey,
I have a performance question/problem with NFA. In general system runs fine, but search -report is unusably slow.
If I run query "search" from main window "more reports" tab, with search criteria "port 80" without any source/destination, it takes 5+ minutes. Any ideas ?
Thanx in advance !
-j
======================
System specs:
* NFA 7.5 SP 4 running on red hat linux with 8GB RAM, quad core 3.4 GHz CPU, lots of disk, dedicated for NFA only.
* 4 netflow devices (totals of 134 interfaces) and 4000 flows / second.
* uname
[root@myserver data]# uname -a
Linux myserver 2.6.18-128.1.10.el5 #1 SMP Wed Apr 29 13:53:08 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
top:
top - 00:25:33 up 11:20, 1 user, load average: 0.61, 1.89, 2.17
Tasks: 122 total, 2 running, 120 sleeping, 0 stopped, 0 zombie
Cpu0 : 13.2%us, 2.8%sy, 0.0%ni, 82.2%id, 1.5%wa, 0.0%hi, 0.2%si, 0.0%st
Cpu1 : 15.7%us, 3.2%sy, 0.0%ni, 69.1%id, 9.6%wa, 0.4%hi, 2.1%si, 0.0%st
Cpu2 : 23.7%us, 3.2%sy, 0.0%ni, 71.5%id, 1.5%wa, 0.1%hi, 0.1%si, 0.0%st
Cpu3 : 19.9%us, 3.2%sy, 0.0%ni, 74.8%id, 1.9%wa, 0.1%hi, 0.2%si, 0.0%st
Mem: 7927648k total, 6918852k used, 1008796k free, 32680k buffers
Swap: 4194296k total, 100k used, 4194196k free, 5259404k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
25296 root 15 0 1859m 1.1g 4400 S 98.2 14.0 40:19.57 mysqld
25208 root 23 0 1358m 259m 24m S 25.0 3.4 9:42.21 java
1759 root 10 -5 0 0 0 S 1.8 0.0 3:46.80 kjournald
* database size
[root@myserver data]# du
116761340 ./netflow
768 ./mysql
116790836 .
[root@myserver data]#
* tuning jboss and java
[root@myserver conf]# grep memory /opt/netflow/NetFlow/server/default/conf/wrapper.conf
wrapper.java.initmemory=128
wrapper.java.maxmemory=1024
[root@myserver conf]#grep JAVA_OPTS /opt/netflow/Netflow/bin/run.sh
<snip snip>
JAVA_OPTS="$JAVA_OPTS -Xms256m -Xmx1024m ....
</snip snip>
* tuning mysql
[root@myserver bin]# grep innodb ./startDB.sh
$DB_HOME/bin/mysqld --no-defaults $useropt --basedir=$DB_HOME --tmpdir=$TMP_HOME --port=$DB_PORT --socket=$TMP_HOME/mysql.sock --default-table-type=INNODB --set-variable=query-cache-type=2 --read_buffer_size=1000000 --read_rnd_buffer_size=520000 --sort_buffer_size=4200000 --myisam_sort_buffer_size=16000000 --key_buffer_size=820000000 --innodb_buffer_pool_size=948000000 --bulk_insert_buffer_size=16000000 --table_cache=128 --innodb_flush_log_at_trx_commit=0 --low-priority-updates --innodb_file_per_table
[root@myserver bin]#