[Snort-users] Snort + PF_RING + DAQ
peter.bates at ...15381...
Tue Sep 4 10:15:05 EDT 2012
-----BEGIN PGP SIGNED MESSAGE-----
I'd actually be interested in anyone's Snort tuning suggestions
because I'm running Snort + PF_RING pretty much as per the Metaflows
10Gb instructions and still dropping traffic - this is with 1-2Gbps
and about 1000 rules.
Following the Metaflows route I was running 32 instances of Snort (and
32 x Barnyards) and the results were not encouraging.
And before Joel says it, I do know you have a SF box you could sell me ;)
Senior Computer Security Officer Phone: +44(0)2076792049
Information Services Division Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
-----END PGP SIGNATURE-----
More information about the Snort-users