[Snort-users] snort pkt process speed
wkitty42 at ...14940...
Mon Jun 24 12:13:52 EDT 2013
On 6/23/2013 08:59, Balla István wrote:
> what happens if snort cannot process the packetflow fast enough?
> E.g.: if a fully used 100Gb/s link connected to snort. does it discard or drop
> the packets?
yes... there are a few settings in the conf dealing with how much memory is
used... i've recently also seen something about processing timeout settings but
can't recall what it was exactly about...
NOTE: No off-list assistance is given without prior approval.
Please keep mailing list traffic on the list unless
private contact is specifically requested and granted.
More information about the Snort-users