RE: Low Snort performances

[SN ORT <snort_on_acid () yahoo com>]

Libcap makes Linux slow, vs. BSD. I switched from
Linux to BSD due to Linux overhead and libcap. I don't
know why anyone would run Snort on Linux vs. FreeBSD.
Then I also got SMP so I went from 90% processor
utilization to two faster processors and now 5%
utilization each. Still on 100MB however. Can't help
you with the GB stuff.

Cheese!

Marc


> Message: 5
> Date: Mon, 19 Apr 2004 09:12:53 -0500 (CDT)
> Subject: RE: [Snort-users] Low Snort performances
> From: todb () planb-security net
> To: bwalder () spamcop net
> Cc: snort-users () lists sourceforge net

> Bob wrote:

> > I am pretty sure SMP support has been around in
FreeBSD for longer than
> > that

> Hmm, poking around a little more, you're right. I
> dunno why I had BSD =!
> supported SMP in my head for this long.

> Anyway. Benchmarks on gigabit networks would be
> swell. I don't care a lot
> about the Sourcefire appliance, though I'm sure it's
> fab and all; I care
> most about straight Snort server builds. I'm mostly
> trying to avoid doing
> my own job if someone else has done it for me
> already. :)

> --
> Tod Beardsley | planb-security.net



        
                
__________________________________
Do you Yahoo!?
Yahoo! Photos: High-quality 4x6 digital prints for 25¢
http://photos.yahoo.com/ph/print_splash


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users