Snort/Packet Capture and kernel options

[Jason Wallace <jason.r.wallace () gmail com>]

Howdy,

There are a couple of options available in the Linux kernel that I
have been wondering whether they have an affect on packet capture and
general snort performance.

Preemption Model
  -  No Forced Preemption (Server)
  -  Voluntary Kernel Preemption (Desktop)
  -  Preemptible Kernel (Low-Latency Desktop)

and...

Timer frequency
  -  100 HZ
  -  250 HZ
  -  300 HZ
  -  1000 HZ


Base solely on the help docs from menuconfig a Preemptible Kernel and
a higher timer frequency are more suited for desktop/real-time systems
while no forced preemption and a lower timer frequency is more suited
for traditional server deployments.

Is there a configuration for these settings that is better suited for
systems dedicated to snort and barnyard2?

thx,
Wally

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users