[Snort-users] How much will a huge list of subnets to the frag3preprocessor slow snort?

Paul Melson pmelson at ...11827...
Fri Nov 9 13:57:38 EST 2007

> How much will it slow down Snort if I just give it a ~4,000 line
snort.conf?  Alternatively, 
> does anyone have a script that does what I want?

It will definitely slow Snort's start-up time, but I don't know at what
point too much configuration hurts frag3 performance more than it helps.  I
say try it and let us know. :)


More information about the Snort-users mailing list