[Snort-users] BPF/libpcap performance, was Re: Seg Fault

Erek Adams erek at ...577...
Tue Feb 26 15:24:08 EST 2002

On Tue, 26 Feb 2002, Chris Green wrote:

> If you are running linux on your IDS stuff, its worth it for hearing
> about the things they do to turbo packet stuff now and then.

Naaa...  I'm not quite that brave yet.

> I'm sure there are things like memcaps for bpf and the like to set and
> I'd love to see a good technical paper other than the winpcap one on
> pcap performance's as well as tuning.


> I'm also pretty sure one of the security websites would even pay a bit
> for an article on tuning of pcap performance.
> Most everything I've seen in the past few years ranks right above
> voodoo.

Hey, I'm from Louisiana so I gotta believe in voodoo!  :)

Erek Adams

More information about the Snort-users mailing list