Re: dropping packets

["Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>]

--On 27 January 2005 16:44 -0500 Hugo <hchlai () netscape net> wrote:

> It seems like I'm on a high traffic volume network and will probably need
> tp upgrade my libpcap to mmap, unfortunately, I haven't got much success.
> I don't understand how to get Snort to use the new libpcap. Any pointers
> would be appreciated.

1) build and install new libpcap
2) configure and build snort. check that it is using new libpcap headers, 
and linking against new libraries.
3) install snort
4) start snort using (at least):
    PCAP_FRAMES=max snort
  to set the PCAP_FRAMES environment variable, which enables new mmap
  functionality.

> Hugo

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users