[Snort-users] Performance questions

Lucas de Carvalho Ferreira - BMS lucas.ferreira at ...4619...
Fri Jan 18 13:18:03 EST 2002


I am trying to monitor a high traffic 100Mbs switch port with snort on a 433
MHz Celeron machine running Red Hat 7.2 but snort is dropping about 10% of
the packets, even if the CPU load is at an average of 70% (seen with top).
Is there any configuration tips for snort or for the Linux kernel to get
better performance? Could it be an I/O performance problem? 

Thanks a lot,

Lucas C. Ferreira
Senior IT Analyst
BMS - Belgo-Mineira Sistemas 
phone: +55-31-32174116
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020118/3a3f3cb5/attachment.html>

More information about the Snort-users mailing list