[Snort-users] Snort + PF_RING + DAQ

Joel Esler jesler at ...1935...
Thu Sep 6 09:51:42 EDT 2012


On Sep 6, 2012, at 7:06 AM, Peter Bates <peter.bates at ...15381...> wrote:

> Hello all
> 
> Just to say - that thanks to assistance from multiple members of the
> list and in particular Livio Ricciulli of Metaflows, I now seem to be
> Snorting happily.
> 
> Just for reference:
> PF_RING Version     : 5.4.6 ($Revision: 5651$)
> Ring slots          : 65536
> Snort 2.9.3.1 and DAQ 1.1.1
> 
> IRQ/CPU affinity set with set_irq_affinity script
> 
> 32 x Snorts running *without* --daq-var bindcpu=X
> 
> Thanks again to all.

How many packets are you dropping? (none?)  
How much traffic are you processing?




More information about the Snort-users mailing list