Re: Barnyard Solaris 2.6 make issue

[Chris Green <cmg () uab edu>]

Steve Rudolph <srudolph () iocenter net> writes:

> I did CFLAGS=-lnsl ./configure
> instead of just ./configure and the make worked!
> Thanks for your help guys!  How much cpu do you think this may save when I
> de-couple the logging?

Well, it doesn't "save" cpu perchance.  It saves the snort process
from cpu usage in hard hit cases like database or Full logging.

If your cpu is pegged and you are using pcap formatted logs and "fast"
alerts, I don't think it will help you squeeze milk from the stone but
you can move your log processing to another machine if you do prefer
one of the more heavy output formats.
-- 
Chris Green <cmg () uab edu>
"Yeah, but you're taking the universe out of context."

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users