[Oisf-users] IPS mode performance is very poor, why?

[Eric Leblond]

Hello,

On Mon, 2012-03-05 at 08:29 +0100, Victor Julien wrote:
> On 03/05/2012 01:37 AM, tingwei liu wrote:
> > 
> > 
> > On Fri, Mar 2, 2012 at 5:34 PM, Eric Leblond <eric at regit.org
> > <mailto:eric at regit.org>> wrote:
> > 
...
> 
> I noticed you have the same issue with Snort. It seems to me this is an
> issue with the kernel or the kernel/userspace interaction.

I'm having a look at it. There has been some changes between the two
kernel versions (bringing more performances) but it seems there is some
side effects with bridge.

BR,
-- 
Eric Leblond 
Blog: http://home.regit.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120305/6aa97f03/attachment.sig>