[Snort-users] snort-2.9.2.1 NFQ mode performance poor

tingwei liu tingw.liu at ...11827...
Thu Mar 1 04:44:08 EST 2012


Snort installed on Fedora core 15 system.
I test snort with NFQ.
#>iptables -A FORWARD -j NFQUEUE --queue-num 3
#>/usr/local/snort/bin/snort -c /etc/snort/snort.conf --daq nfq -Q
--daq-var queue=3 --daq-dir=/usr/local/daq/lib/daq

If my linux system set to nat mode, performance is very good, forward
bandwidth almost 100Mbps.
But if my linux system set to bridge mode, performace is very poor, forward
bandwidth only 10kbps....
Why?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120301/c6d49b76/attachment.html>


More information about the Snort-users mailing list