Snort mailing list archives

max_queue_events


From: Thomas Bechtold <ThomasBechtold () jpberlin de>
Date: Fri, 7 May 2004 20:51:34 +0200

Hi,
Could anybody explain me the exact function from max_queue_events?
I watched the sourcecode, but i'm not sure which need this parameter has. I'm 
not good in programming;)

Can i tell snort, how big the queue for pakets(which will be checked) is? The 
default is 5, so if i increase this value, Snort would be slower but don't 
have packet loss? Right or not?

Cheers Thomas



used max_queue_event with:

[snip snort.conf]
config detection: max_queue_events 10
[snap]


-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: