Hash Load Balancing (HLB) and Filtering

Comparable to parallel processing, Endace hash load balancing (HLB) and filtering techniques can be used to provide the equivalent of multi-threaded execution for natively single-threaded applications (such as Snort). The HLB function includes a real-time, deterministic, load balancing algorithm which fairly distributes dissimilar flows (unmatched hash values) between CPU cores.

With separate instances of IDS instances (for example, Snort) assigned to each CPU in a multi-core platform, parallel processing of captured traffic is achieved with no need for inter-processor threading or communications.