[Snort-users] question for snort flow established

waldo kitty wkitty42 at ...14940...
Mon Mar 18 11:29:06 EDT 2013


On 3/18/2013 10:04, JJ Cummings wrote:
> Checksum offloading
[...]
>> [@ALL] why is this "-k none" suddenly needed more and more in recent months??
>> we've never used it in any of our snort installations... is it special to a
>> certain set of NICs?? [/@ALL]

i understand that but /why/ is it needed now and hasn't been needed before? is 
it for server grade NICs only? does it have to do with the quantity of traffic 
flowing? is it related to gigabit NICs?




More information about the Snort-users mailing list