[Snort-devel] Snort-devel Digest, Vol 107, Issue 19

sunila sahu sonila.sahu at ...2499...
Mon Jul 6 03:56:32 EDT 2015


Here is my understanding of snort++ multithreading feature:

Snort++ processes each input packet source on a separate instance by
binding a new analyzer thread to a freed cpu core providing load-balancing
across threads with a common snort configuration . But there cant be
multiple threads per single Packet source or single interface.

On Tue, Jun 23, 2015 at 5:30 PM, <snort-devel-request at lists.sourceforge.net>
wrote:

> Send Snort-devel mailing list submissions to
>         snort-devel at lists.sourceforge.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.sourceforge.net/lists/listinfo/snort-devel
> or, via email, send a message with subject or body 'help' to
>         snort-devel-request at lists.sourceforge.net
>
> You can reach the person managing the list at
>         snort-devel-owner at lists.sourceforge.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Snort-devel digest..."
>
>
> Today's Topics:
>
>    1. Re: Snort++: how to get multithreading to work? (elof at ...969...)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 22 Jun 2015 17:29:19 +0200 (CEST)
> From: elof at ...969...
> Subject: Re: [Snort-devel] Snort++: how to get multithreading to work?
> To: Russ <rucombs at ...3461...>
> Cc: "Prude, Terrell \(SCC\)" <Terrell_Prude at ...3587...>,
>         "snort-devel at lists.sourceforge.net"
>         <snort-devel at lists.sourceforge.net>
> Message-ID:
>         <alpine.BSF.2.00.1506221726170.71767 at ...3333...>
> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
>
>
> Hi Russ!
>
> Could you elaborate?
>
> /Elof
>
>
> On Wed, 17 Jun 2015, Russ wrote:
>
> > Currently load balancing must be done externally which means you get one
> > packet thread per source.  If you have just one interface, one packet
> thread
> > is all you get.
> >
>
>
>
> ------------------------------
>
>
> ------------------------------------------------------------------------------
> Monitor 25 network devices or servers for free with OpManager!
> OpManager is web-based network management software that monitors
> network devices and physical & virtual servers, alerts via email & sms
> for fault. Monitor 25 devices for free with no restriction. Download now
> http://ad.doubleclick.net/ddm/clk/292181274;119417398;o
>
> ------------------------------
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>
>
> End of Snort-devel Digest, Vol 107, Issue 19
> ********************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20150706/1bfea45e/attachment.html>


More information about the Snort-devel mailing list