Snort mailing list archives

Re: run snort on dual core intel atom cpus?


From: Joel Esler <jesler () sourcefire com>
Date: Tue, 15 Feb 2011 08:10:32 -0500

The RAM is going to be your limitation.  You are going to want more RAM than that depending on how much traffic you are 
trying to process/rules you are going to run/configuration/network traffic. 

There are many different scenarios where Snort will run well, or poorly.

I am not sure about the Atom processor though, I don't think I've ever seen Snort installed on a box with an Atom 
processor (I don't think), so the performance is unknown.

As far as being Dual core, it doesn't matter.  Snort isn't "multithreaded", it has pthreads for certain tasks, but 
people in the Snort community don't generally think of Snort as "multithreaded" for tasks.  That being said, it's a 
good idea to 'pin' Snort to a processor that is idle.

For instance if your box boots, and everything is running on one core, then run Snort on the other core. etc.

J

On Feb 15, 2011, at 5:21 AM, John Adams wrote:

how does Snort perform on a intel atom dual core 1GB RAM machine if the 
network link is 100MBit/s or 1GBit/s?

--
Joel Esler
jesler () sourcefire.com
http://blog.snort.org && http://blog.clamav.net


------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: