Snort mailing list archives
ip ranges & perfomance
From: "Edwin Eefting" <edwin () bit nl>
Date: 23 Oct 2001 11:58:02 CEST
Is it correct that the cpuload increases with the number of ip adresses? Normally I use 213.136.0.0/19 for my homenet. It then has aprox. 50% load. But when I add only one ip (like 1.2.3.4/32), the CPU load jumps to 100%. Why is this? Is every iprange checked against all the rules? (e.g. double the number of ranges, and the load will also double) -- __________________ /\ ___/ Edwin Eefting /- \ _/ Business Internet Trends BV /--- \/ __________________ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- capturing a suspisous traffic stream phillip mawson (Oct 22)
- Re: capturing a suspisous traffic stream Martin Roesch (Oct 22)
- Re: capturing a suspisous traffic stream Stan Scalsky (Oct 22)
- Re: capturing a suspisous traffic stream Chris Green (Oct 22)
- ip ranges? Edwin Eefting (Oct 23)
- Message not available
- ip ranges & perfomance Edwin Eefting (Oct 23)
- Re: capturing a suspisous traffic stream Stan Scalsky (Oct 22)
- Re: capturing a suspisous traffic stream Martin Roesch (Oct 22)