[Snort-sigs] does snort support multi-core machines?

Joel Esler jesler at ...435...
Tue May 8 22:24:02 EDT 2012


It's single threaded, however you can flow pin the traffic amongst several CPUs by using taskset to pin Snort to each CPU and then using a DAQ like PF_RING to load balance the traffic between the instances.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

On May 8, 2012, at 4:50 AM, 闫振宇 wrote:

> hi
>  
> Does snort support multi-core machines? or is it single-threaded ?
>  
> 2012-05-08
>  
> 闫振宇 系统部
> 
> <窝窝团logo signature(07-27-16-48-28).png>
> 
> 
> 
> 北京窝窝团信息技术有限公司
> 
> ______________________________________________________________________________________________________
> 
> Add:北京市海淀区农大南路1号硅谷亮城9号楼1层 邮编:100080
> 
> Tel:+86-10-59065069 Mob:+86-13261949497
> 
> E-mail:yanzhenyu at ...3670... www.55tuan.com
> 
>  
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and 
> threat landscape has changed and how IT managers can respond. Discussions 
> will include endpoint security, mobile security and the latest in malware 
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
> 
> 
> Please visit http://blog.snort.org for the latest news about Snort!





More information about the Snort-sigs mailing list