[Snort-users] Performance questions

Saad Kadhi bsdguy at ...4401...
Fri Jan 18 15:16:04 EST 2002


On Fri, 2002-01-18 at 23:12, Lucas de Carvalho Ferreira - BMS wrote:
> Hello,
> 
> I am trying to monitor a high traffic 100Mbs switch port with snort on a 433
> MHz Celeron machine running Red Hat 7.2 but snort is dropping about 10% of
> the packets, even if the CPU load is at an average of 70% (seen with top).
> Is there any configuration tips for snort or for the Linux kernel to get
> better performance? Could it be an I/O performance problem? 
What kernel are you running ? how your RH is installed ? is it a minimal
install ? what type of network cards to you have ?
-- 
/Saad --  [bsdguy at ...4401...] 
[pgp keyid: 35592A6D http://pgp.mit.edu]
# buy a geek-in-a-can, point nozzle at technical problem and spray
# if desesperate degauss your screen. it might solve your pb as well





More information about the Snort-users mailing list