VRT: Single Threaded Data Processing Pipelines and the Intel Architecture.
I wanted to bring this post to the attention of my blog readers as well, just in case my readers are also not subscribers to the VRT blog.
Marty Roesch (Sourcefire's benevolent dictator/CTO) guest-blogged on the VRT blog about Snort, multi-threading, Intel architectures, hyperthreading, and cores. It's a really great post about why
Multithreading isn't all it's cracked up to be, and is only useful when used correctly. Just because you "Multithread" everything, doesn't mean it'll run faster. That's a common misconception that Marty is trying to debunk here, and I encourage a read of his article. Snort is an extremely well performing piece of software and we get a lot of questions about why we aren't pushing "Snort 3.0" harder (as it has multithreading)
Hopefully this post answers some of that.
Subscribe to:
Post Comments (Atom)
Evernote, Omnifocus, and my productivity
Over the past several years my job here at Cisco Talos has changed drastically. I took on new roles, which is awesome and exciting, but in ...
-
Without going off the deep-end here and discussing every single Snort rule keyword, I just wanted to touch on a few modifiers that people so... -
Let me start off by saying I'm not bashing the writer of this article, and I'm trying not to be super critical. I don't want to...
-
1. I don't feel like I have much to say. I do a tremendous amount of writing and blogging on the Snort, ClamAV, and Talos blogs. So...
No comments:
Post a Comment