Snort mailing list archives
Re: snort perf monitoring
From: Andreas Östling <andreaso () it su se>
Date: Sat, 23 Jul 2005 21:02:26 +0200 (CEST)
On Fri, 22 Jul 2005, John Hally wrote:
Hello All, I was wondering how I would go about monitoring the performance of the snort process. I think I've successfully implemented PF_RING and I guess I'm looking for proof that it's working the way I think it is. I currently have Ntop running using the PF_RING libpcap and it looks like it's performing well based on its built in perf stats on dropped packets by pcap or the ntop process. I'm just not sure if there's an easy way to do the same with snort. Is there possibly an snmp hook into the process where I could grab stats using an mrtg/cricket like app. Thanks!
You could enable the perfmonitor preprocessor and use http://people.su.se/~andreaso/perfmon-graph/ /Andreas ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort perf monitoring John Hally (Jul 22)
- Re: snort perf monitoring Matt Kettler (Jul 22)
- Re: snort perf monitoring Andreas Östling (Jul 23)
- <Possible follow-ups>
- RE: snort perf monitoring John Hally (Jul 25)