From 47e7d03cba5db507c081921d2c4f5a208b9c0460 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Mon, 16 Oct 2006 18:17:09 +0000
Subject: Clarify bpf max size.

---
 packages/snort/snort_advanced.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'packages/snort')

diff --git a/packages/snort/snort_advanced.xml b/packages/snort/snort_advanced.xml
index 104a7e3c..c11d40f3 100644
--- a/packages/snort/snort_advanced.xml
+++ b/packages/snort/snort_advanced.xml
@@ -44,7 +44,7 @@
 		<field>
 			<fielddescr>Maximum BPF buffer size</fielddescr>
 			<fieldname>bpfmaxbufsize</fieldname>
-			<description>Changing this option adjusts the system maximum BPF buffer size.  Leave blank if you do not know what this does. Default is 524288.</description>
+			<description>Changing this option adjusts the system maximum BPF buffer size.  Leave blank if you do not know what this does. Default is 524288. This value should never be set above hardware cache size. The best (optimal size) is 50% - 80% of the hardware cache size.</description>
 			<type>input</type>
 		</field>
 		<field>
-- 
cgit v1.2.3