Snort mailing list archives

Re: packet loss


From: sekure <sekure () gmail com>
Date: Tue, 28 Sep 2004 10:55:21 -0400

64bit PCI-X NICs, fast bus. 

And patches for libpcap.  
Either this: http://public.lanl.gov/cpw/
or this: http://www.ntop.org/PF_RING.html


----- Original Message -----
From: Larry Wichman <larrywichman () yahoo com>
Date: Tue, 28 Sep 2004 07:13:52 -0700 (PDT)
Subject: [Snort-users] packet loss
To: snort-users () lists sourceforge net


In the course of my testing of Snort I have averaged about 40% packet
loss. I am running Snort on Fedora. The segment I am monitoring is 100
mb and is very busy. Does anyone have any recommendations for tuning
Snort to not drop so many packets? Is there any recommendations for
hardware? The CPU is running at about 40% and the memory looks fine.
 
~Larry

________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: