Snort mailing list archives

Re: Snort use of memory


From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 02 Nov 2004 10:20:56 -0500

At 03:45 AM 11/2/2004, Alex Butcher, ISC/ISYS wrote:
> Snort's not a cached and buffered system.

It can be, if you link it against Phil Woods' libpcap <http://public.lanl.gov/cpw/>, which improves performance of sniffing applications such as Snort, by allocating user-definable ring buffers.

Good point. Although I'd view this as not increasing snort's usage per-se, it is a situation where you can allocate more memory to improve snort's performance.


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: