[Snort-users] Snort use of memory

Matt Kettler mkettler at ...4108...
Tue Nov 2 07:26:55 EST 2004


At 03:45 AM 11/2/2004, Alex Butcher, ISC/ISYS wrote:
> > Snort's not a cached and buffered system.
>
>It can be, if you link it against Phil Woods' libpcap 
><http://public.lanl.gov/cpw/>, which improves performance of sniffing 
>applications such as Snort, by allocating user-definable ring buffers.

Good point. Although I'd view this as not increasing snort's usage per-se, 
it is a situation where you can allocate more memory to improve snort's 
performance. 





More information about the Snort-users mailing list