snort breakdown

["Hanumantha R. Manchala" <hmanchal () cs utsa edu>]

Dear snort users,

I have problems doing stress test on snort. I would like to find at what
speeds snort starts dropping packets. I am using tcpreplay to send packets
from a tcpdump file at 50Mbps. I am sending packets from two machines at
50Mbps. Snort is running on a third machine. All these machines are
connected using a serial cable. None of them is on the Internet.

First of all, I would like to know if the packets are being sent out at
speeds tcpreplay claims are being sent at. How can find that? I tried
using 'ifconfig -a'. But I could not figure it out. Is there a script or
some tool that can help me do that?

Secondly, How can I find out the rate of capture of packets on the machine
running snort?

Thirdly, What is the way to find out the speeds at which snort starts
dropping packets?

I would greatly appreciate your help. Thanks for your time.

Thanks,
-Manchala.

PS:

1) All my machines are Pentium 4 (1.8GHz) running Redhat 9.0 .
2) I am using snort-1.9.1





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users