[Snort-users] Poor bandwidth using snort 2.9.0.4 in afpacket mode

carlopmart carlopmart at ...11827...
Tue Apr 5 08:30:43 EDT 2011


On 04/05/2011 02:15 PM, Nigel Houghton wrote:
> On Tue, 05 Apr 2011 11:42:39 +0200, carlopmart wrote:
>> Hi all,
>>
>>    I am testing a snort 2.9.0.4 (build 111) in afpacket mode but
>> bandwidth is really poor. For example, downloading an iso image (640 MB)
>> with snort up, bandwidth is between 140Kb and 180kb, without snort up is
>> between 900Kb and 1MB. I have loaded only emerging-attack_response.rules
>> file.
>>
>>    How can increase this bandwidth when snort is up??
>
> Disable the emerging-attack_response.rules file and what happens?
>
> --
I disabled the rule and bandwidht increase to 275 kb ... but it is still 
far from the total bandwidth (1MB).


-- 
CL Martinez
carlopmart {at} gmail {d0t} com




More information about the Snort-users mailing list