From owner-freebsd-stable@FreeBSD.ORG Mon Aug 29 22:56:28 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EFD1916A41F for ; Mon, 29 Aug 2005 22:56:28 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id 86E0443D49 for ; Mon, 29 Aug 2005 22:56:28 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.13.1/8.13.3) id j7TMuNrS081782; Mon, 29 Aug 2005 17:56:23 -0500 (CDT) (envelope-from dan) Date: Mon, 29 Aug 2005 17:56:23 -0500 From: Dan Nelson To: Jason Message-ID: <20050829225623.GC1476@dan.emsphone.com> References: <20050826120500.GA8907@thevoid.delnoch.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050826120500.GA8907@thevoid.delnoch.net> X-OS: FreeBSD 5.4-STABLE X-message-flag: Outlook Error User-Agent: Mutt/1.5.9i Cc: freebsd-stable@freebsd.org Subject: Re: pcap and gig speeds. X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Aug 2005 22:56:29 -0000 In the last episode (Aug 26), Jason said: > We are planning on updating a number of old machines, being used as > IDS sensors, and in the past, there has been a known issue regarding > gig speeds and pcap with regards to snort. Do you have an URL referring to the issue? As long as your pcap buffers are big enough and your machine can handle snort's CPU load I don't see a problem. -- Dan Nelson dnelson@allantgroup.com