Snort mailing list archives

Snort3 multiqueue ethernet card -> multi packet threads assignment


From: Özkan KIRIK via Snort-devel <snort-devel () lists snort org>
Date: Wed, 2 Sep 2020 14:42:09 +0300

Hello,

I'm using Intel i350 and Intel x710 NIC. Both of them supports multiqueue.
OS: FreeBSD 12.1 Stable

I'm thinking to modify libdaq netmap module for opening a single queue of
NIC.
Main goal is distributing each NIC queue to different snort thread.

Are there any problems with this idea/logic?
Can all features ( Openappid, port_scan, rate_limit and ips ) of snort with
this configuration work without problem?

I'm afraid about while traffic distributed across different threads, can
snort detect work properly?

Regards
_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: