Re: Performance questions

[Olaf Schreck <chakl () syscall de>]

Hey, Abe,

> Well, it _could_ be anything. =)  Here are some things you can do that
> I've found to be very effective while monitoring high-volume networks.
[...]

Completely agreed on all 7 issues.  I have been snorting on different 
OSen in different environments.  I regurarily use these methods to make 
a sensor fit some specific purpose.  Steps 1, 6 and 7 are the most 
important for a start, I think.


ciao,
chakl
--
Olaf Schreck  -  chakl () syscall de  -  Syscall Network Solutions AG, Berlin

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users