[Snort-users] "Making Snort go fast under Linux..."

Crook, Parker Parker_Crook at ...14786...
Wed Feb 24 14:04:49 EST 2010


Edward,

Maybe some clarification is needed under the Preprocessors section; when you state "So if you can, you need to reduce the numbers of preprocessor to a minimum", maybe a side note to your readers that you should never turn off frag3 or stream5 (and really http_inspect) would be in order.

Just my two cents,
-Parker

-----Original Message-----
From: Edward Bjarte Fjellskål [mailto:edward.fjellskal at ...14590...]
Sent: Wednesday, February 24, 2010 9:03 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] "Making Snort go fast under Linux..."

Hi list,

During the years, I have tried to gather some notes
on what can help "Snort go faster".

I summed it up in a blog post:
http://www.gamelinux.org/?p=81

If anyone here has any comments/improvements/tips etc,
I would be happy to hear about them, and include them
in my post for future reference.

E

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list