[Snort-devel] Myricom 10G + Snort x 4

Joel Esler jesler at ...402...
Mon Oct 29 15:44:21 EDT 2012


On Oct 29, 2012, at 1:07 PM, David Browning <warcraft.fool at ...2499...> wrote:

> Hello, I am using a Myricom 10G card with Snort and I am trying to run Snort in parallel using taskset.  I am able get tcpdump to correctly run in parallel but for some reason when I run Snort in parallel only the first 2 instances of snort do any processing (and only their share).  So for 8 instances of Snort only the first 2 instances do anything (regardless of what affinity I set to them) and they only process 1/8th of the total packets each.  I have verified that both programs are using the correct libpcap that came with the card.  Any ideas? 

That might be a question for Myricom's support personnel.  I'm not familiar with their cards.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20121029/f8e48911/attachment.html>


More information about the Snort-devel mailing list