Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting
Mailing Lists: lists.sourceforge.net > snort-users > 07 > 100443.html (Request Expert lists.sourceforge.net Support)

Re: [Snort-users] [RGSPAM] Re: network bandwidth downs when snort inoine is up

From: carlopmart <carlopmart(at)gmail.com>
Date: Wed Oct 10 2007 - 12:38:14 EDT

I only use this rules: 

bleeding-compromised.rules
bleeding-dshield.rules
bleeding-scan.rules ..

Only three ....

Joel Esler wrote: 

> How many rules are you running?  Do you only have rules running that are 
> applicable to your network?
> 
> 
> 
> 
> -- 
> joel esler
> 
http://demo.sourcefire.com/jesler.pgp.key
> 
> 
> 
> On Oct 10, 2007, at 11:12 AM, carlopmart wrote:
>

>> Hi Joel, Matt, Jason and all,
>>
>> I have do it some speed tests using url provided by Jason
>> (http://www.speakeasy.net/speedtest/). And the results are:
>>
>> - Using Snort-Inline with clamav preprocessor:
>>
>> Download speed: 776 Kbps
>> Upload speed: 156 Kbps
>>
>> - Using Snort-Inline without clamav preprocessor:
>>
>> Download speed: 806 Kbps
>> Upload speed: 255 Kbps
>>
>> - Without Snort:
>>
>> Download speed: 821 Kbps
>> Upload speed: 299 Kbps
>>
>> Ok, in my opinion it is clear that the problem is clamav
>> preprocessor. I
>> understand that it is normal to lose some bandwidth when I use clamav
>> preprocessor, but as much as half??
>>
>>
>> --
>> CL Martinez
>> carlopmart {at} gmail {d0t} com
>>
>> -------------------------------------------------------------------------
>> This SF.net email is sponsored by: Splunk Inc.
>> Still grepping through log files to find problems? Stop.
>> Now Search log events and configuration files using AJAX and a browser.
>> Download your FREE copy of Splunk now >> http://get.splunk.com/
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users@lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>

>
> 
-- 
CL Martinez
carlopmart {at} gmail {d0t} com

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> 
http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Received on Wed Oct 10 12:47:54 2007

This archive was generated by hypermail 2.1.8 : Wed Jul 16 2008 - 04:37:40 EDT

Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library