[Snort-users] BPF/libpcap performance, was Re: Seg Fault

Erek Adams erek at ...577...
Tue Feb 26 15:03:05 EST 2002

On Tue, 26 Feb 2002, Chris Green wrote:

> FYI, its BPF/libpcap performance and not TCP stack performance that is the
> issue when it comes to snort

Ok, with that being said, here's a question:  Is it worth upgrading to another
version of libpcap each time it comes out?  Or tracking it's CVS as well?

Along those lines, would there be any useful TCP/IP stack parameters to
tune/change, or would that just be a waste of effort?

Erek Adams

More information about the Snort-users mailing list