Re: slow transfers from a samba share

[Daniel Struck <community () struck lu>]

I found the cause. It is not snort but the wireless card driver. If i put the wireless card manually in promiscous mode 
I get the same slow transfer rates.
It is the Hermes PCMCIA card support in kernel v2.6.9-gentoo-r3.

Will try out if linux-wlan-ng gives the same result.


Daniel


On Sun, 14 Nov 2004 17:39:07 +0100
Daniel Struck <community () struck lu> wrote:

> Hello,
>
>
> I experience very slow transfer rates from a samba share and even ignore host with bpf doesn't help.
>
> My specs:
>
> - Snort Version 2.2.0 (Build 30)
> - Gentoo ~x86
> - Mobile AMD Athlon(tm) XP 2000+
> - wireless connection
> - samba share hosted on a nslu2-device with original firmware V2.3R25 (192.168.0.6, Samba 2.2.7b-ja-1.0)
>
>
> Without snort I get a transfer rate of about 310KB/s from the samba share, as shown in the KDE transfer dialog.
>
> But when I start snort with
> "snort -u snort -i eth1 -l /var/log/snort -c /etc/snort/snort.conf"
> I get a transfer rate of about 18 - 36 KB/s, ten times slower.
>
> Even when I start snort with:
> "snort -u snort -i eth1 -l /var/log/snort -c /etc/snort/snort.conf not host 192.168.0.6"
> I get this slow samba transfer rate.
>
>
> Does anyone else experience this problem?
>
>
> Greetings,
>
> Daniel Struck
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: InterSystems CACHE
> FREE OODBMS DOWNLOAD - A multidimensional database that combines
> robust object and relational technologies, making it a perfect match
> for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users