[Snort-users] (no subject)

wkitty42 at windstream.net wkitty42 at windstream.net
Mon Feb 5 23:22:17 EST 2018


On 02/05/2018 08:41 PM, Dan O'Brien wrote:
> And I have multiple snort.u2.xxxxxxxx files in /var/log/snort.  My computer 
> slowed to a crawl from processing the any-to-any rules.  Once I commented it out 
> it is back to running normally.  Base just must not be making the connection?


yes, any-to-any rules will certainly raise the processing requirements... i 
guess you can ignore my previous post with those two random eWAGs, then... those 
two are pretty common problems we see...


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*


More information about the Snort-users mailing list