Snort mailing list archives
libpcap-mmap and PF_RING
From: "Santi Benito" <benisoroa () gmail com>
Date: Wed, 26 Apr 2006 18:51:29 +0200
Hi, I would like to know,if possible, all the steps that I have to take to use snort with mmap mode, because I have read that it works better, it doesn't drop so much packets, also if anyone has patched the kernel with RF_RING to have a better performance I would thank to him/her a lot if could give me detailed information about how to do it. I am a little bit worried because I have tried it but it doesn`t work.... Thanks a lot. Santi
Current thread:
- libpcap-mmap and PF_RING Santi Benito (Apr 26)