Snort mailing list archives

libpcap-mmap and PF_RING


From: "Santi Benito" <benisoroa () gmail com>
Date: Wed, 26 Apr 2006 18:51:29 +0200

Hi, I would like to know,if possible, all the steps that I have to take to
use snort with mmap mode, because I have read that it works better, it
doesn't drop so much packets, also if anyone has patched the kernel with
RF_RING to have a better performance I would thank to him/her a lot if could
give me detailed information about how to do it.
I am a little bit worried because I have tried it but it doesn`t work....

Thanks a lot.
Santi

Current thread: