[Snort-users] Threaded Snort

agetchel at ...1525... agetchel at ...1525...
Tue Mar 20 11:49:04 EST 2001


Greetings!
	Windows 2000 Server, Advanced Server, and Datacenter Server supports
this as well.  You can set the processor affinity of any process running in
user space.

Thanks,
Abe

Abe L. Getchell - Security Engineer
Division of System Support Services
Kentucky Department of Education
Voice   502-564-2020x225
E-mail  agetchel at ...1525...
Web     http://www.kde.state.ky.us/



> -----Original Message-----
> From: Siddhartha Jain [mailto:s_i_d_j at ...131...]
> Sent: Tuesday, March 20, 2001 11:28 AM
> To: snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] Threaded Snort
> 
> 
> I believe Solaris allows this but only on its high-end servers.
> 
> ----- Original Message -----
> From: "Erik Engberg" <Erik.Engberg at ...511...>
> To: "'Gregor Binder'" <gbinder at ...462...>; "Siddhartha Jain"
> <s_i_d_j at ...131...>
> Cc: <snort-users at lists.sourceforge.net>
> Sent: Tuesday, March 20, 2001 9:43 PM
> Subject: RE: [Snort-users] Threaded Snort
> 
> 
> > >Gregor Binder       <gregor.binder at ...462...>
> >
> > >If you are using SnortSnarf on the same box, it will help in that
> > >running it will have less or no (if you are running an 
> operating system
> > >that can bind processes to a certain CPU) impact on the 
> running snort
> > >instance. The point is, additional programs running on 
> your sensor will
> > >be scheduled to run on the other CPU if the one snort uses is busy.
> >
> > What OS:s allow you to do this binding? For instance, if I 
> would like to
> > dedicate a CPU (and a scsi disk) to snort, and let the 
> other CPU (and scsi
> > disk, even controller) do the rest of the box need and 
> maybe the snort db,
> > apache etc.
> >
> > Also, could I take a 4xCPU box and run 4 instances of Snort 
> on it, on 4
> NICs
> > (or a quad nic)?
> >
> > Would any of this be of feasible/usable?
> >
> > /Erik
> 
> 
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 




More information about the Snort-users mailing list