[Snort-users] Threaded Snort

Siddhartha Jain s_i_d_j at ...131...
Tue Mar 20 11:28:07 EST 2001

I believe Solaris allows this but only on its high-end servers.

----- Original Message -----
From: "Erik Engberg" <Erik.Engberg at ...511...>
To: "'Gregor Binder'" <gbinder at ...462...>; "Siddhartha Jain"
<s_i_d_j at ...131...>
Cc: <snort-users at lists.sourceforge.net>
Sent: Tuesday, March 20, 2001 9:43 PM
Subject: RE: [Snort-users] Threaded Snort

> >Gregor Binder       <gregor.binder at ...462...>
> >If you are using SnortSnarf on the same box, it will help in that
> >running it will have less or no (if you are running an operating system
> >that can bind processes to a certain CPU) impact on the running snort
> >instance. The point is, additional programs running on your sensor will
> >be scheduled to run on the other CPU if the one snort uses is busy.
> What OS:s allow you to do this binding? For instance, if I would like to
> dedicate a CPU (and a scsi disk) to snort, and let the other CPU (and scsi
> disk, even controller) do the rest of the box need and maybe the snort db,
> apache etc.
> Also, could I take a 4xCPU box and run 4 instances of Snort on it, on 4
> (or a quad nic)?
> Would any of this be of feasible/usable?
> /Erik

Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

More information about the Snort-users mailing list