[Snort-users] 2.1.3rc1 Performance

Gary_Portnoy at ...11307... Gary_Portnoy at ...11307...
Thu May 20 11:54:05 EDT 2004


I looked at the code in util.c and the only difference between 2.1.1rc1 
and 2.1.3rc1 is that they changed the output from signed to unsigned 
integers.  So the problem really lies in libpcap and more importantly the 
ps_drop function.



More information about the Snort-users mailing list