Home page logo
/

snort logo Snort mailing list archives

Snort slowly problem
From: Ozgur Karatas <okaratas () yandex com>
Date: Wed, 12 Jun 2013 13:12:05 -0400

Hello all;

I use Debian Wheezy and Snort, DAQ and Base.
 
base-1.4.5
daq
libdnet
libpcap
snort_2.9.4.6
 
Debian and kernel version:
 
# cat /etc/debian_version 
7.0
 
# uname
Linux 3.2.0-4-amd64 #1 SMP Debian 3.2.41-2+deb7u2 x86_64 GNU/Linux
 
Snort trying to bridge mode but network traffic running very slow.
 
Snort command: snort -D -d --daq nfq -Q -c /etc/snort/snort.conf

FW command: iptables -A FORWARD -j NFQUEUE

barnyard command: barnyard2 -D -c /etc/snort/barnyard2.conf -d /var/log/snort -f snort.log -w 
/etc/snort/barnyard2.waldo -C /etc/snort/classification.config
 
# brctl show
bridge namebridge idSTP enabledinterfaces
br08000.647002130cfanoeth0
eth1
 

How do I solve this problem of slowness? Where could be the problem?

Thanks for all help
 
Regards
 
Ozgur Karatas

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


  By Date           By Thread  

Current thread:
  • Snort slowly problem Ozgur Karatas (Jun 12)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]