[Snort-users] How can you verify if snort is using libpcap mmap mode?

This is a discussion on [Snort-users] How can you verify if snort is using libpcap mmap mode? within the Snort forums, part of the System Security and Security Related category; I've downloaded and installed libpcap with mmap mode on my snort box. I've added PCAP_FRAMES=max to my ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-29-2004
Basselgia, Barry A Mr
 
Posts: n/a
Default [Snort-users] How can you verify if snort is using libpcap mmap mode?

I've downloaded and installed libpcap with mmap mode on my snort box.

I've added PCAP_FRAMES=max to my environment.

When I run TCPDUMP it says it's running in MMAP mode.

But, nothing has changed in the startup message for snort. Is there a way
to verify that snort/libpcap is using mmap mode?

Barry



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 01:19 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0