[Snort-users] max_queue_events

Thomas Bechtold Thomas at ...9508...
Fri May 7 12:08:10 EDT 2004


Hi,
Could anybody explain me the exact function from max_queue_events?
I watched the sourcecode, but i'm not sure which need this parameter has. I'm 
not good in programming;)

Can i tell snort, how big the queue for pakets(which will be checked) is? The 
default is 5, so if i increase this value, Snort would be slower but don't 
have packet loss? Right or not?

Cheers Thomas



used max_queue_event with:

[snip snort.conf]
config detection: max_queue_events 10
[snap]




More information about the Snort-users mailing list