Re: [Snort-inline-users] snort inline performance

[Adayadil T. <ada...@gm...>]

what about stream_reassembly preprocessor. Do you have that turned on ?



On 11/10/05, Dino Dragovic <dra...@gf...> wrote:
> Hello Sathyanss,
>
> what about your rules, did you disabled rules you don't need ?
>
> regards,
>
> Dino
>
> >Hi,
> >
> >I am using snort_inline-2.3.0-RC1 on linux kernel 2.4.25 (server is in
> >bridge mode) and working fine with 50 MB of traffic. Yesterday i have
> >upgarded my snort server to GIGE(fiber) module and diverted 30 MB more
> >traffic to snort , but after that all the users are experiancing slow
> >browsing and pages are opening very slow.
> >
> >
> >Can any one suggest to fine tune the Snort (currently using standard
> >configuration) and OS to perform better with 150 to 200 MB traffic.
> >
> >Below is the hardware configuration
> >
> >P4 Intel(R) Xeon(TM) CPU 3.00GHz (Dual)
> >2 GB RAM
> >Intel GIGE (fiber) NIC
> >
> >
> >Iptables rule
> >
> >iptables -I FORWARD -s x.x.x.x/16 -j QUEUE
> >
> >
> >Regards
> >Sathyan
> >
> >
> >
> >------------------------------------------------------------------------
> >
> >
> >
> >
>
>
>
> --
> This message was scanned for spam and viruses by Trinity & BitDefender.
>
>
>
>
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Downl=
oad
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>