Discussion:
[sentinix-list] Improve Snort Alert reporting speed?
Will Bailey
2004-09-09 18:16:14 UTC
Permalink
Is there a way to improve the speed when viewing Snort alert reports? It really "chugs" on my older HP NetServer LC2 (PII 366) w/RAID. It takes several minutes to pull up activity reports.

I noticed that we get thousands of invalid IP traffic related packets reported due to running Netware in a cluster. I tried to disable the particular alert & restart to see if that would help. However, it is still so slow that it is barely useable.

Any recommendations re. configuration changes (IE: even if I need to edit some config files manually) would be welcomed.

Thanks,
Will

Loading...