[Snort-users] Snort with low mem

Jefferson, Shawn Shawn.Jefferson at ...14448...
Thu May 20 11:47:05 EDT 2010


Speaking of that... what is the "preferred" search method now with 2.8.6?  Is it the new one?

-----Original Message-----
From: Joel Esler [mailto:jesler at ...1935...] 
Sent: Thursday, May 20, 2010 6:36 AM
To: Parag Pote
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Snort with low mem

I don't *think* anything has changed in the lowmem search method in recent releases, maybe someone from devel can comment on it, however, in 2.8.6, we have a new bnfa search method which is faster and uses less memory than before.  Might want to check that one out.


On May 20, 2010, at 8:17 AM, Parag Pote wrote:

> Hi,
> 
> I am using snort 2.8.5. I tried running snort with and without 
> 
> config detection: serach-method lowmem
> 
> But with both the memory required is same. I remember in earlier version(long back 2.3.0) I used to see less memory requirement with lowmem algorithm. Is something changed in recent releases?
> 
> Rgds,
> Parag
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
Joel Esler








------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list