Mail Delivery Status Notification

[Postmaster <Administrator () wagweb com>]

MAIL ESSENTIALS SENDER NOTIFICATION

The following message:

TO:      mdiwan () wagweb com
FROM:    cmg () uab edu
DATE:     Tue, 29 Jan 2002 08:25:07 -0600
Subject: Re: [Snort-users] CPU usage 100%


has been quarantined by Mail Essentials for the following reason(s):

Subject contains word(s)/phrase(s) '100%'


Mail essentials
> --- Begin Message ---
>
>
> From: Chris Green <cmg () uab edu>
>
> Date: Tue, 29 Jan 2002 08:25:07 -0600
>
> "Alessandro Fiorenzi" <a.iorenzi () libero it> writes:
>
> > Hi, I have installed a snort sensor on a Pentium III 733MHz to monitor 3
> > C class traffic, but I see everytime cpu usage 100% is it possible? 
> > On this machine I have two processor but snort use only one processor,
> > is there any way to use two processor?
>
> To get snort to use 2 cpus, you have to run 2 instances of snort.  It
> is not multithreaded.
>
> You might try running 2 class Cs on one snort instance and 1 on the
> other and see how it goes.
>
> How much traffic are you seeing?  What is the rough breakdown between
> ports/protocols?
> -- 
> Chris Green <cmg () uab edu>
> "Yeah, but you're taking the universe out of context."
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> --- End Message ---