[Snort-devel] Multi threading in ips_options

Carter Waxman (cwaxman) cwaxman at cisco.com
Mon Mar 11 08:37:31 EDT 2019


Hi Diamian,

There shouldn’t be any critical sections in an ips options. The current threading model places 1 interface set / pcap per thread, so threads shouldn’t need to share any data with each other. What global data are you trying to share?


  *   Carter

From: Snort-devel <snort-devel-bounces at lists.snort.org> on behalf of Damian Chiliński via Snort-devel <snort-devel at lists.snort.org>
Reply-To: Damian Chiliński <lapsio3 at gmail.com>
Date: Sunday, March 10, 2019 at 10:28 PM
To: "snort-devel at lists.snort.org" <snort-devel at lists.snort.org>
Subject: [Snort-devel] Multi threading in ips_options

How does multi threading work in Snort 3? I mean - i made IPS Option and I want it to be stateful (as in use global data shared amongst all ips option instances). However from what I saw in manual Snort 3 support multi threading. So how do I handle critical sections in IPS Option module code? Can I just use pthread mutexes? Or is there some other recommended way?

Best regards
Damian Chilinski
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20190311/e6a656eb/attachment.html>


More information about the Snort-devel mailing list