Re: Snort use of memory

["Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>]

--On 01 November 2004 15:24 -0500 Matt Kettler <mkettler () evi-inc com> wrote:

> At 10:16 AM 11/1/2004, Larry Wichman wrote:
> > I added more memory to one of my Snort boxes but Snort
> > does not seem to want to use it. I thought there was a
> > doc somewhere that says how to tell Snort to use more
> > memory. Can anyone point me to the doc. I looked
> > through the archives and FAQs and did not see
> > anything.
>
> Erm.. Why do you even want snort to consume more memory?
>
> Snort's not a cached and buffered system.

It can be, if you link it against Phil Woods' libpcap 
<http://public.lanl.gov/cpw/>, which improves performance of sniffing 
applications such as Snort, by allocating user-definable ring buffers.

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users