Re: [Snort-sigs] Snort ClamAV for 2.3.3

[Erik Fichtner <emf () obfuscation org>]

On Tue, May 10, 2005 at 03:45:42AM +1200, Jason Haar wrote:
> Has anyone worked out the performance impact of this patch? I love the 
> idea - but wonder about how much extra overhead it adds?

They make a pretty big deal about using a ramdisk for clamav, 
so I would imagine that the performance hit ranges from "some" to
"lots", depending on ports being monitored.
That said, I haven't gotten around to installing this yet.

*That* said, it's probably not going to cause any major damage to
small pipe home/soho users where this kind of thing is a big win
anyway. 


-- 
Erik Fichtner; Unix Ronin

"Mathematics is something best shared between consenting adults
in the privacy of their own office" - Adam O'Donnell

Attachment: _bin
Description: