# Performance testing BRO

**URL:** <https://community.zeek.org/t/performance-testing-bro/1086>\
**Category:** Zeek\
**Created:** [December 14, 2006, 5:15am UTC](https://community.zeek.org/t/performance-testing-bro/1086 "2006-12-14T05:15:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Randy\_Caldejon](https://avatars.discourse-cdn.com/v4/letter/r/ad7895/32.png) [@Randy\_Caldejon](https://community.zeek.org/u/Randy_Caldejon)\
**Post date:** [December 14, 2006, 5:15am UTC](https://community.zeek.org/t/performance-testing-bro/1086/1 "2006-12-14T05:15:08Z")

</div>

Greetings,

My company is in the process of porting ntop ( [www.ntop.org](http://www.ntop.org) ) to a hardware acceleration platform. After this, we'd like to do the same for BRO as an experiment.

I'm curious to know if there is a standard suite of tests used to benchmark BRO? Our goal is to baseline BRO on commodity hardware then run the same tests on the accelerated platform. We have ideas on how to do this, but we're certainly open to suggestions -- especially from those intimately familiar with BRO.

Regards,

Randy

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [December 15, 2006, 7:52pm UTC](https://community.zeek.org/t/performance-testing-bro/1086/2 "2006-12-15T19:52:01Z")

</div>

No, we don't have any performance benchmark. We did some performance  
measurements in the past on traces (see  
[http://www.icir.org/robin/papers/ccs04.pdf](http://www.icir.org/robin/papers/ccs04.pdf)), but I'd suppose that  
you guys are more interested in live traffic.

In general, when doing measurements with Bro, it is important to  
keep in mind that performance depends a \*lot\* on the actual  
configuration. Bro internally applies various schemes to only  
perform types of analysis which are actually required for the given  
setup.

Robin

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/performance-testing-bro/1086/3 "2022-05-06T15:38:05Z")

</div>


