[Snort-devel] multithreaded snort
dr at ...40...
Mon Feb 2 06:48:23 EST 2004
The output plugins should probably just all be removed
to emphasize the point :-).
On January 29, 2004 01:30 am, Dirk Geschke wrote:
Lots of stuff about databases...
And these wise words:
> But additionally I still think that you should never use the
> database plugin within snort. If the database access is slow
> then it is likely that snort misses some packets due to the
> timeout caused for waiting of the output plugin. (This was
> one reason to write FLoP...)
Top security experts. Cutting edge tools, techniques and information.
Vancouver, Canada April 21-23 2004 http://cansecwest.com
pgpkey http://dragos.com/ kyxpgp
More information about the Snort-devel