Author: deri Date: 2010-10-18 07:53:22 +0200 (Mon, 18 Oct 2010) New Revision: 4374
Modified: trunk/PF_RING/userland/snort/daq-0.2/os-daq-modules/daq_pfring.c Log: Contribution by Will Metcalf <[email protected]> 1. Optionally allows a clusterid to be set. I only do per flow clustering as with multiple disparate snort processes round-robin doesn't make any sense. 2. I put in a bit of code that allows the user to optionally set affinity for the snort process. Snort is single threaded so we don't have to worry about thread id's etc. 3. Fixed the interface parsing stuff, so now you have to enter an interface via -i but it is now successfully parsed. Example usage... /opt/PF_RING/bin/snort -c etc/snort.conf --pid-path=./log1 -D --daq pfring -i eth1 --daq-var clusterid=44 --daq-var bindcpu=0 -l ./log1 /opt/PF_RING/bin/snort -c etc/snort.conf --pid-path=./log2 -D --daq pfring -i eth1 --daq-var clusterid=44 --daq-var bindcpu=1 -l ./log2 /opt/PF_RING/bin/snort -c etc/snort.conf --pid-path=./log3 -D --daq pfring -i eth1 --daq-var clusterid=44 --daq-var bindcpu=2 -l ./log3 _______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
