Snort mailing list archives

Re: stream4 performance problems


From: Martin Roesch <roesch () sourcefire com>
Date: Wed, 26 Feb 2003 21:40:24 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

What hardware/OS are you running on? Sounds like it's fairly modest if it's having a tough time with 10Mbps...

     -Marty


On Tuesday, February 25, 2003, at 08:29  AM, Edin Dizdarevic wrote:


Hello everybody

During my performance tests I've noticed, that
using stream4 preprocessor can slow down the
performance really badly in fast networks (over
10Mbit/s).

Is anybody else having similar problems?

Is there any other solution to solve the problems
of TCP-reassembly?

A proxy should help, since reassembly must be done there.

Regards,

Edin

--
Edin Dizdarevic



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


- -- Martin Roesch - Founder/CTO Sourcefire Inc. - (410) 290-1616
Sourcefire: Enterprise-class Intrusion detection built on Snort
roesch () sourcefire com - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (Darwin)

iD8DBQE+XXqcqj0FAQQ3KOARAn14AJ4uIibBtE5YiKwJNiTiR3NwpufCWgCfX8JI
7Q2gNn4MXbZGnOB1rugeZU4=
=7fqn
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: