Snort mailing list archives
Re: FW: Snort_232_Build12_Installer.exe
From: Jeremy Hewlett <jh () sourcefire com>
Date: Wed, 16 Mar 2005 11:28:53 -0500
On Wed, Mar 16, Lee Clemens wrote:
Any hints as to what a good number may be to increase it to for the -current rule-set(s)?
You don't need to set the flowbits in 2.3.2. The default setting in the code is at 64 (which yields 512 unique flowbits IDs).
Will it impact performance to have it set too high? Not higher enough?
There will be some impact if you go overboard with flowbits, but it shouldn't be crippling. ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- FW: Snort_232_Build12_Installer.exe Lee Clemens (Mar 15)
- Re: FW: Snort_232_Build12_Installer.exe Chris Reid (Mar 15)
- RE: FW: Snort_232_Build12_Installer.exe Lee Clemens (Mar 15)
- Re: FW: Snort_232_Build12_Installer.exe Jeremy Hewlett (Mar 16)
- Re: FW: Snort_232_Build12_Installer.exe Brian (Mar 16)
- RE: FW: Snort_232_Build12_Installer.exe Lee Clemens (Mar 15)
- <Possible follow-ups>
- Snort_232_Build12_Installer.exe Lee Clemens (Mar 21)
- Re: FW: Snort_232_Build12_Installer.exe Chris Reid (Mar 15)