Snort mailing list archives
snort.conf "detection engine"
From: Franklin Jones <grat () wyldwood com>
Date: Tue, 30 Mar 2010 15:32:13 -0600
Question - snort.conf: detection engine configuration, directive config detection: search-method <option> where <option> is one of 7 things, ac, ac-std, ac-bnfa, acs, cs-banded, ac-sparsebands, lowmem basicly low->high mem and low->high performance or combinations there of. What would be considered 'low' or for that matter 'high', with current multi-core systems, is this setting still valid/useful? Or should it just be left to default? for that matter what is default, as I don't see that mentioned. fj.. ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort.conf "detection engine" Franklin Jones (Mar 30)
- Re: snort.conf "detection engine" Mike Lococo (Mar 30)
- Re: snort.conf "detection engine" Joel Esler (Mar 30)
- Re: snort.conf "detection engine" Jason Wallace (Mar 31)
- Re: snort.conf "detection engine" Mike Lococo (Mar 30)