Snort mailing list archives

Snort multithread


From: Xiong Wu <xiong.wu1981 () gmail com>
Date: Fri, 15 Jul 2011 09:05:53 +0800

I know the user is able to run multiple snort instances with network
load balance on multiple cores platform.

Some preprocessors such as "sfportscan"  and "threshold" have to see
the global network packets to work correctly.
However in load balance mode, each snort instance can only see a piece
of global network packets.

Is there any idea to resolve this issue.


Thanks,
Xiong

------------------------------------------------------------------------------
AppSumo Presents a FREE Video for the SourceForge Community by Eric 
Ries, the creator of the Lean Startup Methodology on "Lean Startup 
Secrets Revealed." This video shows you how to validate your ideas, 
optimize your ideas and identify your business strategy.
http://p.sf.net/sfu/appsumosfdev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel


Current thread: