[Snort-users] snort pkt process speed

waldo kitty wkitty42 at ...14940...
Mon Jun 24 12:13:52 EDT 2013

On 6/23/2013 08:59, Balla István wrote:
> hello,
> what happens if snort cannot process the packetflow fast enough?
> E.g.: if a fully used 100Gb/s link connected to snort. does it discard or drop
> the packets?

yes... there are a few settings in the conf dealing with how much memory is 
used... i've recently also seen something about processing timeout settings but 
can't recall what it was exactly about...

NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

More information about the Snort-users mailing list