[Bro] A few questions

[Robin Sommer]

On Tue, Feb 02, 2010 at 13:53 -0500, Powell, Scott wrote:

> Given our current setup, how would I go about these BPF tricks to
> leverage multiple cores on a single machine?

The click setup already mentioned is probably the better solution,
but when using BPF, you would give each worker a different BPF
filter ignoring all but its slice of the traffic. One can express
the hash "(src+dst) mod n" in BPF (let me know if you want the exact
filter).

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org