Snort mailing list archives

RE: Dual Processor Machines


From: PPowenski () oag com
Date: Tue, 13 Jan 2004 07:51:45 -0000

OK the long exlpanation....

There is more to running a system than just worrying about a single
application and what CPU it is operating from.
i.e. 
The operating system and..
Disk I/O
Process scheduler process 0 and others in unix
network I/O
daemons needed to communicate with the management console, database, and
possibly others

With two CPU's the system can setup the stacks and pointers for one
processor and context switch to the other when another process is scheduled
to be run. This operation allows the system more overhead to relieve the
system of having to load the CPU with the contents it needs (stack pointers,
data registers, memory pointers), which on a single cpu would perform the
task, tear down the processor pointers, then load the next process data,
execute, tear down, reload etc.... This is what I mean by stating the system
runs smoother. You cannot measure it in terms of x2 the speed if you have
two processors since both share the same memory and bus and some contention
occurs. Other higher performance systems have their own memory space and I/O
busses to push performance to higher levels but those systems are very
expensive


Paul




-----Original Message-----
From: fiorenzi () tiscali it [mailto:fiorenzi () tiscali it] 
Sent: 08 January 2004 13:57
To: PPowenski () oag com
Cc: lists () venom600 org; lists () itsecurity3 its uiowa edu;
snort-users () lists sourceforge net
Subject: Re: [Snort-users] Dual Processor Machines


Is sure that runs  very smooth and reliable, but it use only one 
processor switching from one to other,  this because snort is not 
multithread and perhaps isn't possible for this kind of process that 
need to much realtime.

A.Fiorenzi

PPowenski () oag com wrote:

there are many more factors than just running instances.

I am running snort on Linux 9.0 with dual 933 PIV and 2.5 gb of memory

RUNS very smooth and reliable.



-----Original Message-----
From: Ben Nelson [mailto:lists () venom600 org]
Sent: 08 January 2004 00:15
To: Jason Alexander
Cc: 'snort-users () lists sourceforge net'
Subject: Re: [Snort-users] Dual Processor Machines


Jason Alexander wrote:
 

I've been reading the archives and it looks like Snort is not SMP
aware
yet so is there a good reason to purchase dual processor machines for 
the sensors boxes.   
   


If you plan on running more than one instance of snort on any of the
sensor boxen, you might consider SMP.

--Ben


 





-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms. Free
Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: