AW: (Snort-users) How to know if snort is dropping packets

[<sandro.poppi () wacker com>]

> Marc-Andre Hamelin wrote:
> > Hi all,
> >
> > Anyone as a way to know in real time if snort is dropping
> packets without
> > having to stop the processes and restart them ?
> > Also, how about when the processes are running in daemon mode ?
>
> Send the Snort process a SIGUSR1, if it's running on daemon mode it
> prints to syslog, if it's running on the console it'll print to that
> display.
>
>      -Marty

Marty,

when sending snort SIGUSR1 this only works once so I have to restart snort to
get further statistics. I'm running snort on RedHat 7.0/7.1 in daemon mode. Is
this normal behaviour or do I miss something?

Thanks,
Sandro


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users