Snort mailing list archives
Randomness in Snort engine
From: Hyunseok <hyunseok () ieee org>
Date: Thu, 11 Sep 2014 12:33:36 -0400
Hi, I have one question about Snort. I was running Snort in offline mode by feeding a tcpdump packet trace to it. I expected that Snort analysis result would be identical when I re-run Snort multiple times with the same packet trace. However, I noticed that the the total packets processed is slightly different across different runs, which affects other analysis results. result.0: Total packets processed: 230718 result.1: Total packets processed: 230720 result.2: Total packets processed: 230722 result.3: Total packets processed: 230721 Do you guys have any idea where this slight randomness comes from in Snort? I'm using the default snort configuration with default rule sets. This question might be user-oriented, but I thought developers may have a better idea on the root cause. Thanks, -HS
------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Randomness in Snort engine Hyunseok (Sep 11)
- Fwd: Randomness in Snort engine Hyunseok (Sep 11)
- Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 11)
- Re: Randomness in Snort engine Hyunseok (Sep 11)
- Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 11)
- Re: Randomness in Snort engine Hyunseok (Sep 11)
- Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 12)
- Re: Randomness in Snort engine Tom Peters (thopeter) (Sep 12)
- Re: Randomness in Snort engine Hyunseok (Sep 12)
- Re: Randomness in Snort engine Hyunseok (Sep 11)