[Snort-users] Optimizing Linux Kernel for Snort

Sam Evans sam at ...5202...
Fri Jul 4 13:31:05 EDT 2003


Unfortunately, we are having to migrate our platform away from FreeBSD
to Linux due to some constraints we are running into.  Long story, not a
happy ending.  But, I'll do some searching on your suggested topic.

Thanks for the response!

-Sam


-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic at ...7509...] 
Sent: Friday, July 04, 2003 1:08 PM
To: Sam Evans
Cc: snort
Subject: Re: [Snort-users] Optimizing Linux Kernel for Snort



Sam Evans wrote:
> Greetings All, and Happy Fourth of July to all the US Readers out
there.
> :)
> 
> I've got a question regarding optimizing a Linux 2.4.18 Kernel to get
> the best performance for snort.  Does anyone have any tips?

Yeah, use OpenBSD ;)

just kidding, but don't forget this

<*> Packet socket
[*]   Packet socket: mmapped IO

See the postings with topics like "Snort dropping packets..."

and using A LOT of memory is the best thing to do.

Have fun,

Edin

> 
> Thanks,
> Sam
> 

-- 
Edin Dizdarevic







More information about the Snort-users mailing list