Snort mailing list archives
RE: Dual Processor Machines
From: PPowenski () oag com
Date: Tue, 13 Jan 2004 07:51:45 -0000
OK the long exlpanation.... There is more to running a system than just worrying about a single application and what CPU it is operating from. i.e. The operating system and.. Disk I/O Process scheduler process 0 and others in unix network I/O daemons needed to communicate with the management console, database, and possibly others With two CPU's the system can setup the stacks and pointers for one processor and context switch to the other when another process is scheduled to be run. This operation allows the system more overhead to relieve the system of having to load the CPU with the contents it needs (stack pointers, data registers, memory pointers), which on a single cpu would perform the task, tear down the processor pointers, then load the next process data, execute, tear down, reload etc.... This is what I mean by stating the system runs smoother. You cannot measure it in terms of x2 the speed if you have two processors since both share the same memory and bus and some contention occurs. Other higher performance systems have their own memory space and I/O busses to push performance to higher levels but those systems are very expensive Paul -----Original Message----- From: fiorenzi () tiscali it [mailto:fiorenzi () tiscali it] Sent: 08 January 2004 13:57 To: PPowenski () oag com Cc: lists () venom600 org; lists () itsecurity3 its uiowa edu; snort-users () lists sourceforge net Subject: Re: [Snort-users] Dual Processor Machines Is sure that runs very smooth and reliable, but it use only one processor switching from one to other, this because snort is not multithread and perhaps isn't possible for this kind of process that need to much realtime. A.Fiorenzi PPowenski () oag com wrote:
there are many more factors than just running instances. I am running snort on Linux 9.0 with dual 933 PIV and 2.5 gb of memory RUNS very smooth and reliable. -----Original Message----- From: Ben Nelson [mailto:lists () venom600 org] Sent: 08 January 2004 00:15 To: Jason Alexander Cc: 'snort-users () lists sourceforge net' Subject: Re: [Snort-users] Dual Processor Machines Jason Alexander wrote:I've been reading the archives and it looks like Snort is not SMP aware yet so is there a good reason to purchase dual processor machines for the sensors boxes.If you plan on running more than one instance of snort on any of the sensor boxen, you might consider SMP. --Ben
------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Dual Processor Machines Jason Alexander (Jan 07)
- Re: Dual Processor Machines Ben Nelson (Jan 07)
- Re: Dual Processor Machines Michael Stone (Jan 13)
- <Possible follow-ups>
- RE: Dual Processor Machines PPowenski (Jan 08)
- Re: Dual Processor Machines fiorenzi () tiscali it (Jan 12)
- RE: Dual Processor Machines PPowenski (Jan 13)