No subject


Thu Nov 23 16:36:19 EST 2017


shove that into a DB.  If you do, be _sure_ to have acres of disk, and one
helluva machine for the DB.  You might get better performance using
Barnyard to spool the files.  If realtime isn't an issue, you might be
better off with tcpdump and then using Snort to post process.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list