Re: Snort 70%/80% CPU Usage on NT4.0

["Michael Davis" <mike () datanerds net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I would stick soem more RAM in there.

Also, the amount of CPU snort uses depends on how your rulesets are
defined. If you log every packet or some nasty CPU intensive
comparisions on many packets then the CPU will spike.

Michael Davis
Chief Technical Officer
Data Nerds, LLC.
http://www.datanerds.net
- ----- Original Message ----- 
From: "Hever C. Rocha - N.O.C" <hever () itcbrasil com br>
To: <snort-users () lists sourceforge net>
Sent: Monday, March 11, 2002 7:11 AM
Subject: [Snort-users] Snort 70%/80% CPU Usage on NT4.0


> Hi Everyone! 
>
> I'm testing Snort 1.8.3 (MySQL Bynary) with the Windows 
> NT 4.0 (Service Pack 6a and hofix's)and Mysql (for the 
> logs) 
>
> When i'm send massive attacks for the test machine, like 
> IISDOS, the snort process increase the 
> use of the cpu computer (70% /80 %). 
> My network is a 10/100 Mbits, with the two computers 
> (the client and the snort machine) in the same segment. 
>
> My Hardware is: 
>
> Server (Where Snort is running) 
> PC Computer 
> CPU Pentium 233 Mhz 
> 64 MB RAM 
> IDE Hard Disk 3.2 
>
> It's Normal? and I need a better computer(Like Pentium III 800/
> 128/256 MB RAM SCSI Hard disk )?
> Best Regards from Brasil 
>
>
> Hever Costa Rocha
> N.O.C
> 55 (73) 234-3029
> 55 (73) 9133-0107
> email: hever () itcbrasil com br
> www.itcbrasil.com.br
>
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPI1sAPiUqZ9dnoKsEQIt3wCg4jCY5Pyt2f6HvshZ4jiDY6FTgUEAnjiq
9E+lEIHxDVfWYMw06K0noKAw
=TInf
-----END PGP SIGNATURE-----



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users