Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Ashley Thomas (athomasunity.ncsu.edu)
Date: Tue Feb 26 2002 - 17:10:06 CST
the packets that Snort processes does'nt touch the tcp/ip stack so would
those parameters matter ??
all the packets to snort is directly from libpcap which is from the
On Tue, 26 Feb 2002, Erek Adams wrote:
> On Tue, 26 Feb 2002, Chris Green wrote:
> > FYI, its BPF/libpcap performance and not TCP stack performance that is the
> > issue when it comes to snort
> Ok, with that being said, here's a question: Is it worth upgrading to another
> version of libpcap each time it comes out? Or tracking it's CVS as well?
> Along those lines, would there be any useful TCP/IP stack parameters to
> tune/change, or would that just be a waste of effort?
> Erek Adams
> Snort-users mailing list
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
Snort-users mailing list
Go to this URL to change user options or unsubscribe:
Snort-users list archive: