[Snort-users] Performance questions
Lucas de Carvalho Ferreira - BMS
lucas.ferreira at ...4619...
Mon Jan 21 05:20:03 EST 2002
I running a 2.4.9 Linux kernel compiled by Red Hat. I installed Red Hat with
a minimum install, with just about telnetd and syslog running. No X11
either. My NIC is a 3COM 3c905b.
> -----Original Message-----
> From: Saad Kadhi [mailto:bsdguy at ...4401...]
> Sent: Friday, January 18, 2002 8:14 PM
> To: Lucas de Carvalho Ferreira - BMS
> Cc: 'snort-users at lists.sourceforge.net'
> Subject: Re: [Snort-users] Performance questions
> On Fri, 2002-01-18 at 23:12, Lucas de Carvalho Ferreira - BMS wrote:
> > Hello,
> > I am trying to monitor a high traffic 100Mbs switch port
> with snort on a 433
> > MHz Celeron machine running Red Hat 7.2 but snort is
> dropping about 10% of
> > the packets, even if the CPU load is at an average of 70%
> (seen with top).
> > Is there any configuration tips for snort or for the Linux
> kernel to get
> > better performance? Could it be an I/O performance problem?
> What kernel are you running ? how your RH is installed ? is
> it a minimal
> install ? what type of network cards to you have ?
> /Saad -- [bsdguy at ...4401...]
> [pgp keyid: 35592A6D http://pgp.mit.edu]
> # buy a geek-in-a-can, point nozzle at technical problem and spray
> # if desesperate degauss your screen. it might solve your pb as well
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users