RE: Performance questions

[Lucas de Carvalho Ferreira - BMS <lucas.ferreira () bms com br>]

Hello,

I running a 2.4.9 Linux kernel compiled by Red Hat. I installed Red Hat with
a minimum install, with just about telnetd and syslog running. No X11
either. My NIC is a 3COM 3c905b.

Regards,
Lucas

> -----Original Message-----
> From: Saad Kadhi [mailto:bsdguy () docisland org]
> Sent: Friday, January 18, 2002 8:14 PM
> To: Lucas de Carvalho Ferreira - BMS
> Cc: 'snort-users () lists sourceforge net'
> Subject: Re: [Snort-users] Performance questions
>
>
> On Fri, 2002-01-18 at 23:12, Lucas de Carvalho Ferreira - BMS wrote:
> > Hello,
> >
> > I am trying to monitor a high traffic 100Mbs switch port 
> with snort on a 433
> > MHz Celeron machine running Red Hat 7.2 but snort is 
> dropping about 10% of
> > the packets, even if the CPU load is at an average of 70% 
> (seen with top).
> > Is there any configuration tips for snort or for the Linux 
> kernel to get
> > better performance? Could it be an I/O performance problem? 
> What kernel are you running ? how your RH is installed ? is 
> it a minimal
> install ? what type of network cards to you have ?
> -- 
> /Saad --  [bsdguy () docisland org] 
> [pgp keyid: 35592A6D http://pgp.mit.edu]
> # buy a geek-in-a-can, point nozzle at technical problem and spray
> # if desesperate degauss your screen. it might solve your pb as well