Re: Myricom 10G + Snort x 4

[Joel Esler <jesler () sourcefire com>]

On Oct 29, 2012, at 1:07 PM, David Browning <warcraft.fool () gmail com> wrote:

> Hello, I am using a Myricom 10G card with Snort and I am trying to run Snort in parallel using taskset.  I am able 
> get tcpdump to correctly run in parallel but for some reason when I run Snort in parallel only the first 2 instances 
> of snort do any processing (and only their share).  So for 8 instances of Snort only the first 2 instances do 
> anything (regardless of what affinity I set to them) and they only process 1/8th of the total packets each.  I have 
> verified that both programs are using the correct libpcap that came with the card.  Any ideas? 

That might be a question for Myricom's support personnel.  I'm not familiar with their cards.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

------------------------------------------------------------------------------
The Windows 8 Center - In partnership with Sourceforge
Your idea - your app - 30 days.
Get started!
http://windows8center.sourceforge.net/
what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!