SMP Snort?

["Wilcoxon, Steve" <SWilcoxon () iqmarketing com>]

Has anyone looked SMP enhancing Snort for high bandwidth situations.

I expect that there are several places that Snort could be broken into multiple threads to take advantage of SMP 
systems. I know it adds overhead, but considering how often I see people complaining about lost data or wanting to 
monitor large volumes of data, it might be worthwhile to consider.

The trick is keeping it a single code base that doesn't slowdown single CPU systems if SMP isn't enabled at compile 
time.

Flame me if you want for raising this question and not attempting to do it myself. I just thought it would be a useful 
discussion.

S.W.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users