Re: How can run Snort on 2 CPU?

["Paul Melson" <pmelson () gmail com>]

On Sun, Mar 2, 2008 at 8:07 AM, bahamin takhtaei <b_takhtaei () yahoo com> wrote:
> Whether we can run Snort on 2 CPU in a system?

There's no problem running Snort on an SMP-capable system with
multiple processors.  However, Snort is not multi-threaded and any one
instance will be running on one CPU.  At the moment, if you need
multiple CPUs to handle the traffic on a single interface, your best
option is to run multiple instances of Snort (no more than 1 per CPU
core on the sensor) and divide up the work with bpf filters.

Marty has announced that Snort 3.0 will be multi-threaded and be able
to use multiple CPUs for a single instance of the engine.
http://securitysauce.blogspot.com/2007/11/snort-30-architecture-series-part-1.html

PaulM

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users