Snort
[Top] [All Lists]

Re: [Snort-users] Snort 2.6.1.3 ignoring stream4

To: "'Joel Esler'" <joel.esler@sourcefire.com>
Subject: Re: [Snort-users] Snort 2.6.1.3 ignoring stream4
From: "Paul Melson" <pmelson@gmail.com>
Date: Mon, 16 Apr 2007 14:50:27 -0400
Cc: adam.keeton@sourcefire.com, snort-users@lists.sourceforge.net
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <20070406194114.GD17941@joel-eslers-power-mac-g5.local>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <40ecb01f0704051352p233d1112yfe97664163ea455b@mail.gmail.com> <20070405212409.GC16720@joel-eslers-power-mac-g5.local> <00b901c77878$9c4625c0$f902fea9@ad.priorityhealth.com> <20070406194114.GD17941@joel-eslers-power-mac-g5.local>
Sender: snort-users-bounces@lists.sourceforge.net
Thread-index: Acd4g4rqJefCO/KdRiWFf8VLe1UbEgH1A4zQ
> Paul,
>
> How much RAM and what type of processor do you have on this machine?
>
> JOel

Hey Joel and anyone else that has any more ideas, I am still experiencing
performance issues with this sensor.  I built 2.6.1.4 and added
'search-method ac-bnfa' to snort.conf and have seen no performance change.
I tried building with or without the dynamic engine and processors and that
doesn't seem to make a difference, either.  Any additional ideas?  What
could I be missing here?  I can run on 2.6.0.2 for now, but I'd like to know
that I have an upgrade path.

Thanks,
PaulM


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>