PCAP_FRAMES

["Jefferson, Shawn" <Shawn.Jefferson () bcferries com>]

Hi,

I'm using Phil Woods MMAP-mode libpcap, and just put more memory in my snort machine.  To take advantage of that, I 
tried using PCAP_MEMORY instead of PCAP_FRAMES=max, but when I do that, snort is logging "Not Using PCAP_FRAMES".  Do 
you have to use PCAP_FRAMES with snort instead of PCAP_MEMORY?

Thanks,
Shawn

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users