[Snort-users] Low Snort performances

Chris Green cmg at ...671...
Tue Apr 20 07:40:03 EDT 2004

"Gianluca Murgia" <gianluca.murgia at ...11669...> writes:

> The maximum rate I can sniff without loss of packets is up to 4Mb/s. What's
> the problem? Is there any kind of important setting on the machine that is
> missing? On the other hand, which settings or services must not be running
> on the machine in order to improve the performances?


Try Phil Wood's pcap if it's not already there. Make sure to read the README's.
Chris Green <cmg at ...1121...>
 "Not everyone holds these truths to be self-evident, so we've worked
                  up a proof of them as Appendix A." --  Paul Prescod

More information about the Snort-users mailing list