Snort mailing list archives

Re: Multiple Snort Instances - One Interface


From: James Thornton <james.f.thornton () gmail com>
Date: Fri, 29 Oct 2010 13:48:46 -0400

I could be mistaken, but believe you need the TNAPI driver with PF_RING to
accomplish this.  TNAPI driver is roughly $400.  That is outside of my
budget at the moment.

Thanks,

Jim T

On Fri, Oct 29, 2010 at 1:30 PM, Will Metcalf <william.metcalf () gmail com>wrote:

Whats wrong with using PF_RING to do this? ;-)

Regards,

Will

On Fri, Oct 29, 2010 at 8:38 AM, James Thornton
<james.f.thornton () gmail com> wrote:
All -

On my quad core system, I would like to load-balance traffic from a
single
Ethernet device across two or four Snort processes.  Has anyone on the
list
accomplished this in the past?  Aside from the PF_RING library, I've had
no
success on Internet searches for load balancing software modules that
provide this capability.  Any guidance from the group would be
appreciated.

Thank You,

Jim T


------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America
contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and
Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in
marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: