Re: snort on obsd performance

[Erek Adams <erek () theadamsfamily net>]

On Fri, 7 Sep 2001, skop d'skop wrote:

> yet my server still can't handle large traffic (2+2)  even with -A fast .
> recently it stop the service after 30-40 minutes of running (snort -d -A
> fast -c snort.conf -l /var/log/snort ) surprising it works well as on same
> set up for firewall using ipf/ipnat.
>
> anyone has tips on improving the performance / tuning of openbsd to handle
> large traffic ?

It might be the big meal I just had ;-) but I'm a little fuzzy on the whole
'large traffic' thing.  Can you define the type of traffic you're trying to
snort?  TCP?  UDP?  ICMP?  Packet size?  Also, what version of snort?  What
does your snort.conf look like?  Plugins?  Preprocessors?

Must make it to couch....  Nappy time coming on ....   Must resist....
zzzzzz...  *snore*

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users