Snort mailing list archives
var PKT_TIMEOUT in sfdaq.c
From: "Guillaume Daleux" <guillaume.daleux () abovesecurity com>
Date: Wed, 29 Feb 2012 17:00:07 -0500
Hi all, We had some problems with snort and snort daq which use 100% of processing power. After debugging, we saw that our system had a lot of call to poll function. The function poll (call in daq) set with a default snort parameter (PKT_TIMEOUT = 1000) is called everytime and didn't respect this timeout of 1 second (maybe heisenbug because only one printf removed this problem). We want to ask you, why this parameter is set to 1000 ms and not -1 ? The poll function is called to wait packets so why the snort daq uses a timeout and not directly value -1 which would block until a packet arrive ? Can we patch snort and change PKT_TIMEOUT to -1 ? Thanks for your answer. Guillaume DALEUX tel : 450.430.8166 x2279 | guillaume.daleux () abovesecurity com sans frais / toll free : 1.866.430.8166 | fax: 450.430.1858 Managed Security Services ∙ Information Risk Management Surveillance ∙ Gestion Des Risques Informationnels 203 - 1919 boul. Lionel-Bertrand ∙ Boisbriand ∙ QC ∙ Canada ∙ J7H 1N8 www.abovesecurite.com <http://www.abovesecurite.com/>
------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Re: Invalid protocol name for "ip_proto" rule option: "igmp" Lukas Matt (Feb 24)
- Re: Invalid protocol name for "ip_proto" rule option: "igmp" Joel Esler (Feb 24)
- var PKT_TIMEOUT in sfdaq.c Guillaume Daleux (Feb 29)
- Re: var PKT_TIMEOUT in sfdaq.c Michael Altizer (Feb 29)
- Re: var PKT_TIMEOUT in sfdaq.c Russ Combs (Feb 29)
- Re: var PKT_TIMEOUT in sfdaq.c Guillaume Daleux (Feb 29)
- Re: var PKT_TIMEOUT in sfdaq.c Russ Combs (Feb 29)
- var PKT_TIMEOUT in sfdaq.c Guillaume Daleux (Feb 29)
- Re: Invalid protocol name for "ip_proto" rule option: "igmp" Joel Esler (Feb 24)