Neet User Guide

Tweaking the performance of your scans

Without some kind of resource limits, neet would consume all available resources to complete the scans as quickly as possible. In practice, this would result in the scanning host becoming unresponsive, especially if other resource-intensive applications - such as Virtual Machines - were running on the same host. To combat this, neet uses a cost/budget system to prevent new scans starting when the available resources have been assigned.

When neet starts, it has a default budget figure which has been set in the configuration file or on the command line. Each scan thread has a notional cost assigned to it: each Service Discovery Module thread for example has a cost of 10, whilst each Global Service Monitor module has a cost assigned which relates to the resources it consumes - the more resource intensive, the higher the cost. The GSM costs are allocated by the module authors and are coded into the modules.

When neet starts any scan, its cost is deducted from the available budget, and returned to the budget when the scan finishes. If the scheduler wants to start a scan but the budget has been used, the scan is queued until budget becomes available again. The budget can be manually adjusted during the scan from the neet shell, to compensate for under- or over-loading of the scanning host. Increasing the budget will immediately allow some of the queued scans to be started, up to the new budget figure. Decreasing the budget will prevent new scans starting until enough existing scans have finished to release some budget again.

However, the budget is automatically trimmed, both upwards and downwards, based the system's load average. If the system is underloaded, the budget is gradually increased to allow more scans to run simultaneously, using up spare capacity. Conversely, if the system is overloaded, the budget is reduced. This will prevent new scans from starting until existing scans have finished and the scanning cost meets the new budget. In this way, the load on the system is reduced. This automatic trimming of the budget can be disabled on the command line prior to starting a scan.

In-Scan Tuning

TO BE COMPLETED