Re: Query about the performance

[Jeff Murphy <jeff.murphy () gmail com>]

This thread has some good info in it regarding performance

http://sourceforge.net/mailarchive/forum.php?thread_name=BANLkTikgnat47diBj49PqLzwaP6%2BcBzrTg%40mail.gmail.com&forum_name=snort-devel

as for "based on flow", yes, if a rule matches snort can capture packets for that session (flow).



On Jun 8, 2011, at 5:54 AM, Gaurav Suryagandh wrote:

> Hi All,
>
> I am trying to incorporate snort in my application for packet filtering.
>
> I have two questions regarding the same.
>
> 1) how much is snort's packet capture rate ?
>
> 2) Can we filter packets based on flow ?
>
> Thanks,
> Gaurav
>
> ------------------------------------------------------------------------------
> EditLive Enterprise is the world's most technically advanced content
> authoring tool. Experience the power of Track Changes, Inline Image
> Editing and ensure content is compliant with Accessibility Checking.
> http://p.sf.net/sfu/ephox-dev2dev
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel


------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel