[Snort-users] PCAP_FRAMES

Jefferson, Shawn Shawn.Jefferson at ...14448...
Mon Feb 16 19:33:07 EST 2009


Hi,

I'm using Phil Woods MMAP-mode libpcap, and just put more memory in my snort machine.  To take advantage of that, I tried using PCAP_MEMORY instead of PCAP_FRAMES=max, but when I do that, snort is logging "Not Using PCAP_FRAMES".  Do you have to use PCAP_FRAMES with snort instead of PCAP_MEMORY?

Thanks,
Shawn

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20090216/290aae69/attachment.html>


More information about the Snort-users mailing list