6. Performance optimization

_images/MoteurDeDetectionOFF.png

Once stream fetching and parsing is enabled on the GCap, capture performance optimizations are available. They can be specified from different menus:

  • 'CPU Assignment': Allows you to assign a number of CPUs to the detection engine.

  • 'Load Balancing': is used to manage the load of the capture interfaces.

  • 'MTU': allows to adjust the size of the captured packet per capture interface.

  • 'Protocols': allows you to select the protocols analyzed and captured.

In addition, a monitoring service called Netdata embedded in the GCenter allows real-time information to be collected on the state of the CPUs, the load, the disks, the detection engines or even filtering.

This feature is available from the following URL: https://Name_of_GCenter/gstats.