Snort mailing list archives
Re: [Emerging-Sigs] lots or rules loaded and snort performance
From: Pedro Marinho <pppmarinho () gmail com>
Date: Fri, 5 Nov 2010 19:54:47 -0200
OK thank you very much.. 2010/11/5 Rodrigo Montoro(Sp0oKeR) <spooker () gmail com>
I'd suggest you to read those urls bellow: http://www.snort.org/assets/126/WhitePaper_Snort_PerformanceTuning_2009.pdf http://blog.joelesler.net/2010/04/fun-with-profile_rules.html About Host Attribute Table is a good read/understand to specially if you are using rules that uses metadata field. http://global-security.blogspot.com/2010/09/pig-doktah-is-born.html http://global-security.blogspot.com/2010/10/haz-drowning-rat-pulledpork-050-is-now.html Hope it helps! Regards, <http://www.linkedin.com/in/spooker>
------------------------------------------------------------------------------ The Next 800 Companies to Lead America's Growth: New Video Whitepaper David G. Thomson, author of the best-selling book "Blueprint to a Billion" shares his insights and actions to help propel your business during the next growth cycle. Listen Now! http://p.sf.net/sfu/SAP-dev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- lots or rules loaded and snort performance Pedro Marinho (Nov 05)
- Message not available
- Re: [Emerging-Sigs] lots or rules loaded and snort performance Pedro Marinho (Nov 05)
- Message not available
- Message not available
- Re: [Emerging-Sigs] lots or rules loaded and snort performance Pedro Marinho (Nov 05)
- Re: [Emerging-Sigs] lots or rules loaded and snort performance Jason Wallace (Nov 05)
- Re: [Emerging-Sigs] lots or rules loaded and snort performance Pedro Marinho (Nov 05)