Hi,
I am trying to set up Snort but i’m having issues when starting the sniffer stream from FW to Snort Box. We have a normal 4-8Mbit Throughput on firewall but when starting this stream i get a 70-80 Mbit traffic on the particular interface (inside) and this almost kills the FW. I cannot stop the sniffer (command times out) in terminal. Is there any particular settings i have missed?
Regards
Henrik