[Snort-users] slow transfers from a samba share

Daniel Struck community at ...12669...
Sun Nov 14 07:40:03 EST 2004


I experience very slow transfer rates from a samba share and even ignore host with bpf doesn't help.

My specs:

- Snort Version 2.2.0 (Build 30)
- Gentoo ~x86
- Mobile AMD Athlon(tm) XP 2000+
- wireless connection
- samba share hosted on a nslu2-device with original firmware V2.3R25 (, Samba 2.2.7b-ja-1.0)

Without snort I get a transfer rate of about 310KB/s from the samba share, as shown in the KDE transfer dialog.

But when I start snort with
"snort -u snort -i eth1 -l /var/log/snort -c /etc/snort/snort.conf"
I get a transfer rate of about 18 - 36 KB/s, ten times slower.

Even when I start snort with:
"snort -u snort -i eth1 -l /var/log/snort -c /etc/snort/snort.conf not host"
I get this slow samba transfer rate.

Does anyone else experience this problem?


Daniel Struck

More information about the Snort-users mailing list