I want to ask a query about snort parallelization.

1) Can snort detection rate remains same for all attacks after parallelisation?

2) As the parallelisation of netowrk traffic in each core is based on flow, what are the problems that can be faced in detecting multi session attacks ; because many applciation level attacks occur in multi sessions.

3) The attacks that may occur in multi sessions can be like DDOS Syn Flood?

closed as off-topic by Rory Alsop Dec 15 '14 at 20:35

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

  • You have 3 questions here - can you separate them out into separate questions please. (I think 3 has been answered her before) – Rory Alsop Dec 15 '14 at 20:35

Browse other questions tagged or ask your own question.