[Snort-users] Performance stats

sekure sekure at ...11827...
Sun Oct 2 13:20:31 EDT 2005

I was wondering if someone could elaborate on the differences between
the application layer and wire counters in Snort stats.  Why would i
sometimes see almost twice the application layer throughput in Mbps
than on the wire?

More information about the Snort-users mailing list