Snort mailing list archives
Re: Ethernet options
From: Jaime Nebrera <jnebrera () gmail com>
Date: Thu, 08 Mar 2012 09:17:42 +0100
Hi Heine,
Try taking a look at this blog post from SecurityOnion http://securityonion.blogspot.com/2011/10/when-is-full-packet-capture-not-full.html
Wow, thanks for the info. Its clear that GRO and such are not a good idea as they "build" super packets that might be problematic. Still, how about RX/TX checksum offloading? I think this ones should be ok, do they? ------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Ethernet options Jaime Nebrera (Mar 07)
- Re: Ethernet options Heine Lysemose (Mar 07)
- Re: Ethernet options Jaime Nebrera (Mar 08)
- Re: Ethernet options Heine Lysemose (Mar 07)