[Snort-users] Preproc tuning

Joel Esler eslerj at ...11827...
Fri Jun 17 09:27:34 EDT 2005

Has anyone else noticed a significant performance increase by
specifying the ports for stream4?

If I look at the code for stream 4, take the ports that are in there. 
and specify them via the snort.conf

ports: < 21 23 25 53 42 80 110 111 143 513 >....etc..

It is SO much faster and doesn't consume as much CPU resources...


More information about the Snort-users mailing list