[Snort-users] Newbie question regarding libpcap

Martin Roesch roesch at ...421...
Tue Oct 24 18:27:00 EDT 2000


The only reason you might see packet loss is if one of the programs is a CPU
hog and prevent efficient packet handling.  I don't know how fast ethereal is,
but Snort shouldn't be bad in this regard.

    -Marty

Jason Haar wrote:
> 
> Really basic one here :-)
> 
> I appear to be able to run several libpcap-compiled sniffer programs
> simultaneously on my workstation (e.g. snort and ethereal). Is that because
> wonderous libpcap "allows" that to happen, or is doing such a thing likely
> to lead to packet loss, etc?
> 
> --
> Cheers
> 
> Jason Haar
> 
> Unix/Network Specialist, Trimble NZ
> Phone: +64 3 9635 377 Fax: +64 3 9635 417
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

-- 
Martin Roesch
roesch at ...421...
http://www.snort.org



More information about the Snort-users mailing list