[Snort-users] Snort getting overloaded by http traffic:

Ashley Thomas athomas at ...5484...
Tue Jun 25 10:07:03 EDT 2002


Does anyone have an idea how many http traffic can snort handle ?
I see that when there are around 2000 http packets/sec snort starts
dropping.

Is this unusual ? Any tuning that i can use ?
I am already using the -A fast -b.

Maybe i can cut short the number of Web rules. By default there are 400+
web* rules.

thanks
ashley

------------------------------------------------------------------------
What I do today is important because I am paying a day of my life for it.
------------------------------------------------------------------------





More information about the Snort-users mailing list