[Snort-users] [Emerging-Sigs] lots or rules loaded and snort performance

Pedro Marinho pppmarinho at ...11827...
Fri Nov 5 17:54:47 EDT 2010


OK thank you very much..

2010/11/5 Rodrigo Montoro(Sp0oKeR) <spooker at ...11827...>

> I'd suggest you to read those urls bellow:
>
> http://www.snort.org/assets/126/WhitePaper_Snort_PerformanceTuning_2009.pdf
>
> http://blog.joelesler.net/2010/04/fun-with-profile_rules.html
>
> About Host Attribute Table is a good read/understand to specially if
> you are using rules that uses metadata field.
>
> http://global-security.blogspot.com/2010/09/pig-doktah-is-born.html
>
>
> http://global-security.blogspot.com/2010/10/haz-drowning-rat-pulledpork-050-is-now.html
>
> Hope it helps!
>
> Regards,
>
>  <http://www.linkedin.com/in/spooker>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20101105/c9ad38a8/attachment.html>


More information about the Snort-users mailing list