[Snort-users] search method lowmem
Chris Green
cmg at ...1935...
Thu Apr 24 10:33:11 EDT 2003
Gerhard Brauer <gerhard.brauer at ...5689...> writes:
> Hello,
>
> i'm using snort in dialup mode (= starting snort when internet
> connection established).
>
> Up to now i'm using snort 1.8. Now i made a upgrade to 2.0. This version
> (in standard configuration) is a "overkill" for my router (P166, 32MB,
> 64MB swap). It uses my full swap and requires ~1min to start up.
>
> So i use the "config detection: search-method lowmem" in snort.conf.
> Great, my router loves me again!
> No swap and starting time as i know it from 1.8 version.
>
> Now my question is (i not found something in docu or faq):
> Does this switch anything "negative" in detection/reporting?
It should identical but slower than the normal modes.
--
Chris Green <cmg at ...1935...>
Chicken's thinkin'
More information about the Snort-users
mailing list