Start up options

["Chris Eidem" <jceidem () dexma com>]

I'm starting my snort and sending it into daemon mode with this command
line:

snort -A fast -bdIo -c snort.conf -i xl1 -D
snort -A fast -bdIo -c snort.conf -i fxp0 -D

Is the -d redundant?  I mean, does the -b option dump everything
(snaplen >= 1500)?  Does it hurt performance?  I'm still getting bad
packet dumps (I get "pcap_loop: bogus savefile header" at some point in
the log file) and I'm trying to figure out why.

TIA,
Chris

Chris Eidem                        Dexma, Inc.
Network Administrator              7701 York Av. S.
Phone: 952.229.1311                Edina, MN 55435

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users