[Snort-users] Snort takes prohibitively huge time for multiple pcap files

Asad, Hafiz ul Hafiz-ul.Asad at ...17478...
Fri Jan 13 12:26:13 EST 2017


Snort Users,

I have two pcap files (about 600 MB each), if I analyse them one-by-one, it took snort 2.9.8.0 about 1 mint 10 sec to process them. But if I use any option of multiple files, e.g. --pcap-list "<list>", it takes like forever for snort to finish and I have to manually stop it. Any solution for this?


Asad



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170113/8e2a49f1/attachment.html>


More information about the Snort-users mailing list