CPU pinning is very important if you want to make use of caches. In this case, zeek worker node not pinned to CPU list 60% of packets on 10g link, but this may be useful for any tight CPU workload