Snort mailing list archives
Re: Snort 2.8.6 performance
From: waldo kitty <wkitty42 () windstream net>
Date: Fri, 08 Oct 2010 15:36:11 -0400
On 10/8/2010 13:19, Jefferson, Shawn wrote:
Has anyone else noticed performance (dropped packets), really take a dive today? I’m missing about 20-30% of packets now… on a sensor that was running great at about 100-200 mb/s until just today/last night. According to my snort stats there isn’t anything unusual as far as stream or frag events go, but the snort process is using 100% CPU today. I’m using the VRT paid subscription rules.
please quote back your "snort -V" output... your config may also be needed... possible you found a bug or some way that someone is trying to evade IDS several other factors... ------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today. http://p.sf.net/sfu/beautyoftheweb _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.8.6 performance Jefferson, Shawn (Oct 08)
- Re: Snort 2.8.6 performance waldo kitty (Oct 08)
- Re: Snort 2.8.6 performance Jefferson, Shawn (Oct 08)
- Re: Snort 2.8.6 performance Matt Olney (Oct 08)
- Re: Snort 2.8.6 performance Jefferson, Shawn (Oct 08)
- Re: Snort 2.8.6 performance Jefferson, Shawn (Oct 08)
- Re: Snort 2.8.6 performance waldo kitty (Oct 08)