RE: snort performance

["Christian Kuhtz" <ck () arch bellsouth net>]

oops, i guess i should be shot for fatfingering the send button.
*sigh*  here's the rest of the info:

> and os is

4.5-STABLE FreeBSD 4.5-STABLE #2: Tue Apr 9 16:45:57 EDT 2002

(cvsup'ed and built the same day)

does anyone have any performance tuning suggestions?  off-line import
via barnyard into mysql on another box is the desired mode of
operation.

we've played with binary logging vs unified etc, and it doesn't seem
to make much of a difference getting down from those very high levels
of packet drops.

anybody have pointers or tuning suggestions?

thanks,
chris



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users