[Snort-users] Performance questions

Olaf Schreck chakl at ...931...
Sat Jan 19 18:17:02 EST 2002


Hey, Abe,

> Well, it _could_ be anything. =)  Here are some things you can do that
> I've found to be very effective while monitoring high-volume networks.
[...]

Completely agreed on all 7 issues.  I have been snorting on different 
OSen in different environments.  I regurarily use these methods to make 
a sensor fit some specific purpose.  Steps 1, 6 and 7 are the most 
important for a start, I think.


ciao,
chakl
--
Olaf Schreck  -  chakl at ...931...  -  Syscall Network Solutions AG, Berlin




More information about the Snort-users mailing list