Re: PCAP_FRAMES

[Todd Wease <twease () sourcefire com>]

Hi Shawn,

The environment variables PCAP_FRAMES and PCAP_MEMORY are not used by
Snort directly, but by Phil Woods libpcap.  Snort just gets the
environment variable and prints the value of it if it exists.  Currently
it only prints the value of PCAP_FRAMES, but could easily print the
value of PCAP_MEMORY as well if it's found in the environment.

Todd



Jefferson, Shawn wrote:
> Hi,
>  
> I’m using Phil Woods MMAP-mode libpcap, and just put more memory in my
> snort machine.  To take advantage of that, I tried using PCAP_MEMORY
> instead of PCAP_FRAMES=max, but when I do that, snort is logging “Not
> Using PCAP_FRAMES”.  Do you have to use PCAP_FRAMES with snort instead
> of PCAP_MEMORY?
>  
> Thanks,
> Shawn
>  
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
> -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
> -Strategies to boost innovation and cut costs with open source participation
> -Receive a $600 discount off the registration fee with the source code: SFAD
> http://p.sf.net/sfu/XcvMzF8H
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users