[Snort-devel] multithreaded snort

Dragos Ruiu dr at ...40...
Mon Feb 2 06:48:23 EST 2004


<fnord>unified output</fnord> 

The output plugins should probably just all be removed
to emphasize the point :-).

cheers,
--dr :-)

On January 29, 2004 01:30 am, Dirk Geschke wrote:

Lots of stuff about databases...

And these wise words:

> But additionally I still think that you should never use the
> database plugin within snort. If the database access is slow
> then it is likely that snort misses some packets due to the
> timeout caused for waiting of the output plugin. (This was
> one reason to write FLoP...)

-- 
Top security experts.  Cutting edge tools, techniques and information.
Vancouver, Canada	April 21-23 2004  http://cansecwest.com
pgpkey http://dragos.com/ kyxpgp




More information about the Snort-devel mailing list