[Snort-users] Performance questions
chakl at ...931...
Sat Jan 19 18:17:02 EST 2002
> Well, it _could_ be anything. =) Here are some things you can do that
> I've found to be very effective while monitoring high-volume networks.
Completely agreed on all 7 issues. I have been snorting on different
OSen in different environments. I regurarily use these methods to make
a sensor fit some specific purpose. Steps 1, 6 and 7 are the most
important for a start, I think.
Olaf Schreck - chakl at ...931... - Syscall Network Solutions AG, Berlin
More information about the Snort-users