Re: [PATCH] DPDK DAQ Module

On 06/16/2016 02:41 PM, Maxim Uvarov wrote:
> On 06/16/16 17:37, Tiwei Bie wrote:
>> On Thu, Jun 16, 2016 at 08:42:33PM +0800, Tiwei Bie wrote:
>>> On Thu, Jun 16, 2016 at 02:22:01PM +0300, Maxim Uvarov wrote:
>>>> That is single thread dpdk-daq module, right?
>>>>
>>> The thread created by rte_eal_init() won't be used. All the daq
>>> methods (e.g. dpdk_daq_acquire) will run on the snort's thread
>>> context.
>>>
>> More details:
>>
>> The thread which calls rte_eal_init() will become DPDK's master
>> thread. So, when you only specify one lcore with eal's -c option,
>> such as: -c 40, no DPDK's slave threads will be created. And the
>> affinity of the snort thread which becomes DPDK's master thread
>> will be set to CPU6 (the 7th CPU).
>>
>> When you specify more than one lcores with eal's -c option, such
>> as: -c ff, seven slave threads will be created by rte_eal_init().
>> But they won't be used.
>>
>> And the daq methods (e.g. dpdk_daq_acquire) will be called in the
>> snort thread context.
>>
>> Best regards,
>> Tiwei Bie
>>
> I'm asked that question because I had in plan update daq module for
> OpenDataPlane:
> https://github.com/Xiche/daq_odp
>
> And for some previous version there were problems in scaling snort
> across number of cpus.
> Which looks like solved in 3.X and will be never fixed in 2.9.x.
>
> But now I think I can follow your patch to integrate ODP to mainline snort.
>
> Best regards,
> Maxim.

FYI - the ODP DAQ module above has been updated to work again with ODP 
v1.10.1.  Like the DPDK DAQ module, it operates in a single-threaded 
mode, driven by the DAQ acquire API being called by Snort.  As you 
surmised, there is no intention to make it work in a different fashion 
for 2.x, but the goal is to be able to have it more cooperatively 
multi-instantiate within the multi-threaded architecture of Snort 3.x.

-Michael

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!