[Snort-users] "Making Snort go fast under Linux..."

Crook, Parker Parker_Crook at ...14786...
Wed Feb 24 14:04:49 EST 2010


Maybe some clarification is needed under the Preprocessors section; when you state "So if you can, you need to reduce the numbers of preprocessor to a minimum", maybe a side note to your readers that you should never turn off frag3 or stream5 (and really http_inspect) would be in order.

Just my two cents,

-----Original Message-----
From: Edward Bjarte Fjellskål [mailto:edward.fjellskal at ...14590...]
Sent: Wednesday, February 24, 2010 9:03 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] "Making Snort go fast under Linux..."

Hi list,

During the years, I have tried to gather some notes
on what can help "Snort go faster".

I summed it up in a blog post:

If anyone here has any comments/improvements/tips etc,
I would be happy to hear about them, and include them
in my post for future reference.


Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list