[Snort-users] Frag3 prealloc_frags question

Gentoo-Wally gentoowally at ...11827...
Mon Mar 27 13:31:05 EST 2006


prealloc_frags <number> - alternate memory management mode, use
preallocated fragment nodes (faster in some situations)

How does this work? If I wanted to play around with this what would a
reasonable starting <number> be? The example snort.conf shows 262144
as an example, but I would rather not blindly throw a number in here
without understanding what it is doing. What "situations" might this
be faster in?

Thx,
Wally




More information about the Snort-users mailing list