Watch Performance
Steve Grubb
sgrubb at redhat.com
Wed May 10 15:32:40 UTC 2006
On Tuesday 11 April 2006 17:01, Steve Grubb wrote:
> OK, I re-worked auditctl to use these syscalls instead of "all". I then
> re-ran the tests on the same kernel as I was testing on since lspp.17 has
> slab debug stuff turned on again.
>
> rules seconds loss
> 0 50 0%
> 10 52 4%
> 25 56 12%
> 50 69 38%
> 75 81 62%
> 90 87 74%
I re-ran the analysis with the lspp.24 kernel. This is the results:
rules seconds loss
0 57.4 0.0%
10 57.8 0.7%
25 56.7 +1.2%
50 58.6 2.1%
75 59.7 4.0%
90 59.1 3.0%
The results look good for this test case. Thanks to everyone that helped solve
this problem! Good job.
-Steve
More information about the Linux-audit
mailing list