Snort mailing list archives

Re: [PATCH] DPDK DAQ Module


From: Tiwei Bie <btw () mail ustc edu cn>
Date: Fri, 17 Jun 2016 07:29:36 +0800

On Thu, Jun 16, 2016 at 09:41:36PM +0300, Maxim Uvarov wrote:
On 06/16/16 17:37, Tiwei Bie wrote:
On Thu, Jun 16, 2016 at 08:42:33PM +0800, Tiwei Bie wrote:
On Thu, Jun 16, 2016 at 02:22:01PM +0300, Maxim Uvarov wrote:
That is single thread dpdk-daq module, right?

The thread created by rte_eal_init() won't be used. All the daq
methods (e.g. dpdk_daq_acquire) will run on the snort's thread
context.

More details:

The thread which calls rte_eal_init() will become DPDK's master
thread. So, when you only specify one lcore with eal's -c option,
such as: -c 40, no DPDK's slave threads will be created. And the
affinity of the snort thread which becomes DPDK's master thread
will be set to CPU6 (the 7th CPU).

When you specify more than one lcores with eal's -c option, such
as: -c ff, seven slave threads will be created by rte_eal_init().
But they won't be used.

And the daq methods (e.g. dpdk_daq_acquire) will be called in the
snort thread context.

Best regards,
Tiwei Bie


I'm asked that question because I had in plan update daq module for
OpenDataPlane:
https://github.com/Xiche/daq_odp

And for some previous version there were problems in scaling snort across
number of cpus.
Which looks like solved in 3.X and will be never fixed in 2.9.x.

But now I think I can follow your patch to integrate ODP to mainline snort.


Cool! Glad to hear that! :-)

Best regards,
Tiwei Bie


------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!


Current thread: