[Snort-users] Multiple Processes - Snort
sonikam at ...4044...
Thu Mar 14 03:09:12 EST 2002
Is it possible that to decouple the logging and analysis stage of
snort , i can run two different processes of snort. one in logger mode
writing to tcpdump file and other in the NIDS mode to only analyze the
i.e. one process will read the tcpdump file and other will write to
just an idea to reduce packet loss..may be this would increase
efficiency of snort in high speed N/w.
More information about the Snort-users