Snort++ Project Help - Slow Inline Throughput

[Shawn M Venti <sv2 () wildcats unh edu>]

Hello All,

I posted about this issue a little while ago however am still struggling. If anyone could be of assistance it would be 
very helpful.

Currently I am working on a project that Snort++ (3.0.0-a4) is a part of. I’m attempting to run this on a smaller 
single board PC made my PC Engine. Please see the specs here:

- AMD Embedded G series GX-412TC , 1 GHz quad core 
- 4 GB DDR-1333
- 3x i210AT LAN

I have successfully built and installed Snort++ on this system but the trouble I am having is horrible throughput (~20 
MBits/sec) on a 100MBits/sec channel. The only modification that I have made to the default configuration is whats 
needed to run in inline mode.

I am using the AFPacket DAQ. Attached to this message is a test through my setup using iPerf and the Snort++ output. 
I’ve also attached my configuration file for Snort++.

All the best,

Shawn

Attachment: iPerf3_Sample1.txt
Description: iPerf3_Sample1.txt

Attachment: Snort++_Sample1.txt
Description: Snort++_Sample1.txt

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!