Snort PF_Ring Load Balancing

[Forensix Land via Snort-users <snort-users () lists snort org>]

I installed Snort 2.9 and PF_Ring, but one of the thread has much bigger dropping rate than the others even if I 
increased the number of threads. The total # of threads is still less than the # of core on the server.

How does PF_Ring do the load balancing? Does it keep all traffic in one session on the same thread? 

Thanks,
FL

Sent from my iPad
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!