[Oisf-users] IPS mode performance is very poor, why?

[tingwei liu]

On Mon, Mar 5, 2012 at 3:53 PM, Eric Leblond <eric at regit.org> wrote:

> Hello,
>
> On Mon, 2012-03-05 at 08:29 +0100, Victor Julien wrote:
> > On 03/05/2012 01:37 AM, tingwei liu wrote:
> > >
> > >
> > > On Fri, Mar 2, 2012 at 5:34 PM, Eric Leblond <eric at regit.org
> > > <mailto:eric at regit.org>> wrote:
> > >
> ...
> >
> > I noticed you have the same issue with Snort. It seems to me this is an
> > issue with the kernel or the kernel/userspace interaction.
>
> I'm having a look at it. There has been some changes between the two
> kernel versions (bringing more performances) but it seems there is some
> side effects with bridge.
>
> I have tested kernel-3.1.10 in this noon. The same issue.
I will test 2.6.36 kernel later.


> BR,
> --
> Eric Leblond
> Blog: http://home.regit.org/
>
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120305/7e61fba4/attachment-0002.html>