Re: Pin snort single processor

[Edward Bjarte Fjellskål <edward.fjellskal () redpill-linpro com>]

Jason Wallace wrote:
> OK so there is no affect on tracking frags, state, or anything else
> that might adversely affect detection. It is just a performance
> recommendation for folks using more than one instance of Snort?

I would say its a performance recommendation for folks concerned
about performance regardless of # of snort instances :)
It does not affect detection other than it might help on lowering
your packet-loss rate (if you have any).

Snort should stick to one CPU preferably for optimal performance.
That said, there are other ways to tweak snort that should be
done first. Also, if you dont have any performance issues, you
dont have to tune anything :)

Ref:
http://www.gamelinux.org/?p=81


> Thx,
> Wally

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users