[Snort-users] snort optimization

Kevin.Brown at ...1022... Kevin.Brown at ...1022...
Thu Jan 18 19:42:56 EST 2001


I don't want to assume anything, so by defrag preprocessor do you mean
preprocessor minfrag: 128?

> Try commenting out the defrag preprocessor, If I disable mine, I go from
> 99.9% cpu to about 20 or 30%.  Of course, you don't get alerted to some
> things that way.





More information about the Snort-users mailing list