[Snort-users] Poor bandwidth using snort in afpacket mode

Nigel Houghton nhoughton at ...1935...
Tue Apr 5 08:15:54 EDT 2011

On Tue, 05 Apr 2011 11:42:39 +0200, carlopmart wrote:
> Hi all,
>   I am testing a snort (build 111) in afpacket mode but 
> bandwidth is really poor. For example, downloading an iso image (640 MB) 
> with snort up, bandwidth is between 140Kb and 180kb, without snort up is 
> between 900Kb and 1MB. I have loaded only emerging-attack_response.rules 
> file.
>   How can increase this bandwidth when snort is up??

Disable the emerging-attack_response.rules file and what happens?

Nigel Houghton
Head Mentalist
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/ && http://labs.snort.org/

More information about the Snort-users mailing list