Snort mailing list archives

Re: Help needed: Performance Check & Traffic Capture


From: David Lambert <dlambert () demo legallock com>
Date: Tue, 1 Jan 2002 19:18:30 -0600

On Tuesday 01 January 2002 06:55 pm, Erek Adams wrote:

None.  That's an odd one.  What OS, Version/Build of Snort and hardware are
you running this on?   Linux based?

Linux 2.4.17 kernel, 3c59x Network cards Athlon 1G2 768M...

If it's Linux based, check the archives from the snort-dev list at
http://marc.theaimsgroup.com/ for some patches provided by Phil Wood
<cpw () lanl gov> to make libpcap + Linux 2.4(?) play nice.

Thanks will look there, try patches and let all know results.

Note that this behaviour seems random, sometimes I get good stats.

Is it a co-incidence that nessus uses its own flavor of libpcap?

Dave.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: