[Snort-users] search method lowmem
gerhard.brauer at ...5689...
Thu Apr 24 08:52:17 EDT 2003
-----BEGIN PGP SIGNED MESSAGE-----
i'm using snort in dialup mode (= starting snort when internet
Up to now i'm using snort 1.8. Now i made a upgrade to 2.0. This version
(in standard configuration) is a "overkill" for my router (P166, 32MB,
64MB swap). It uses my full swap and requires ~1min to start up.
So i use the "config detection: search-method lowmem" in snort.conf.
Great, my router loves me again!
No swap and starting time as i know it from 1.8 version.
Now my question is (i not found something in docu or faq):
Does this switch anything "negative" in detection/reporting?
I use it on a ISDN connection NAT/IPTABLES machine with 4 clients, so
thereis not "much" traffic.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the Snort-users