Snort mailing list archives
RE: statistics that Snort can do
From: "Kreimendahl, Chad J" <Chad.Kreimendahl () umb com>
Date: Tue, 17 Jun 2003 00:08:34 -0500
of note... you appear to only be able to -USR1 a snort 1 time... it dies the second time you -USR1 it. (my experience... on solaris...) There's also a semi-undocumented way to dump stats (perfstats) at selected intervals... I believe there is info in the snort.conf file about this. -----Original Message----- From: Erek Adams [mailto:erek () snort org] Sent: Monday, June 16, 2003 2:34 PM To: Francesco Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] statistics that Snort can do On Mon, 16 Jun 2003, Francesco wrote:
If and when you exit Snort, you can get a statistics report of some significance. The point is you only get them (including the package drop rate) when
you
exit ! I suppose it would be good the user could monitor these data anytime. I looked at the command line but I find no option available for this
purpose.
Am I wrong? any idea how to do that? Please do not say use Acid or something else.. I'd like to know if we
can
get these info straight from Snort. At first.
kill -USR1 <snort_pid> Will dump them into syslog. Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.NET email is sponsored by: eBay Great deals on office technology -- on eBay now! Click here: http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- statistics that Snort can do Francesco (Jun 16)
- Re: statistics that Snort can do Brian (Jun 16)
- Re: statistics that Snort can do Erek Adams (Jun 16)
- <Possible follow-ups>
- RE: statistics that Snort can do Kreimendahl, Chad J (Jun 16)
- Re: statistics that Snort can do Terence Runge (Jun 17)