Snort mailing list archives

Re: How much will a huge list of subnets to the frag3preprocessor slow snort?


From: "Paul Melson" <pmelson () gmail com>
Date: Fri, 9 Nov 2007 13:57:38 -0500

How much will it slow down Snort if I just give it a ~4,000 line
snort.conf?  Alternatively, 
does anyone have a script that does what I want?

It will definitely slow Snort's start-up time, but I don't know at what
point too much configuration hurts frag3 performance more than it helps.  I
say try it and let us know. :)

PaulM




-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: