[Snort-devel] Snort v2.7.0 improve performance with lowmem search method on pcap file!
rmkml at ...879...
Sun Jul 22 17:08:29 EDT 2007
Snort v2.7.0 improve performance, on same pcap file:
snort 2615 : 60s
snort 270 : 30s
search method used is lowmem and snort conf is similar (as possible),
if I change to ac-bnfa, on same pcap file :
snort 2615 : 62s
snort 270 : 36s
lowmem use 103Mo of memory and acbnfa use 111Mo on snort 270.
alert number: 270=25486,2615=25585 , test repeated 10x.
tested on linux fedora core 7 x86 laptop plateform
More information about the Snort-devel