[Snort-users] Performance questions

Lucas de Carvalho Ferreira - BMS lucas.ferreira at ...4619...
Mon Jan 21 05:20:03 EST 2002


Hello,

I running a 2.4.9 Linux kernel compiled by Red Hat. I installed Red Hat with
a minimum install, with just about telnetd and syslog running. No X11
either. My NIC is a 3COM 3c905b.

Regards,
Lucas

> -----Original Message-----
> From: Saad Kadhi [mailto:bsdguy at ...4401...]
> Sent: Friday, January 18, 2002 8:14 PM
> To: Lucas de Carvalho Ferreira - BMS
> Cc: 'snort-users at lists.sourceforge.net'
> Subject: Re: [Snort-users] Performance questions
> 
> 
> On Fri, 2002-01-18 at 23:12, Lucas de Carvalho Ferreira - BMS wrote:
> > Hello,
> > 
> > I am trying to monitor a high traffic 100Mbs switch port 
> with snort on a 433
> > MHz Celeron machine running Red Hat 7.2 but snort is 
> dropping about 10% of
> > the packets, even if the CPU load is at an average of 70% 
> (seen with top).
> > Is there any configuration tips for snort or for the Linux 
> kernel to get
> > better performance? Could it be an I/O performance problem? 
> What kernel are you running ? how your RH is installed ? is 
> it a minimal
> install ? what type of network cards to you have ?
> -- 
> /Saad --  [bsdguy at ...4401...] 
> [pgp keyid: 35592A6D http://pgp.mit.edu]
> # buy a geek-in-a-can, point nozzle at technical problem and spray
> # if desesperate degauss your screen. it might solve your pb as well
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020121/2319dd15/attachment.html>


More information about the Snort-users mailing list