[Oisf-users] IPS mode performance is very poor, why?

[tingwei liu]

On Mon, Mar 5, 2012 at 3:53 PM, Eric Leblond <eric at regit.org> wrote:

> Hello,
>
> On Mon, 2012-03-05 at 08:29 +0100, Victor Julien wrote:
> > On 03/05/2012 01:37 AM, tingwei liu wrote:
> > >
> > >
> > > On Fri, Mar 2, 2012 at 5:34 PM, Eric Leblond <eric at regit.org
> > > <mailto:eric at regit.org>> wrote:
> > >
> ...
> >
> > I noticed you have the same issue with Snort. It seems to me this is an
> > issue with the kernel or the kernel/userspace interaction.
>
> I'm having a look at it. There has been some changes between the two
> kernel versions (bringing more performances) but it seems there is some
> side effects with bridge.
>
> This morning, I have tested 2.6.36.4 kernel. The performance is very good.
It's seems that the kernel changes bring in this issue.
Can you tell me the changes go to the main tree from which version?
Thanks for your reply!

> BR,
> --
> Eric Leblond
> Blog: http://home.regit.org/
>
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120306/f17b40e5/attachment-0002.html>