snort occupy all cpu time?

[Vincent Chen <vcba79 () ms1 hinet net>]

Dear all,

I am running snort on amd 486-100 box which equipped cheap
realtek network adapter. Platform is freebsd and snort is monitoring
tun0 interface for an ADSL link. After running a while, this sensor
occupy all CPU time or give me the following message:

Jun 17 18:01:33 bach /kernel: pid 20399 (snort), uid 2: exited on signal 11
Jun 17 18:01:33 bach /kernel: tun0: promiscuous mode disabled

snort exist so often, I have to write a script to monitor it. Any similar
experience or solution for this?

Thanks,




----------------------------------------------------------------------------
                   Bringing you mounds of caffeinated joy
                      >>>     http://thinkgeek.com/sf    <<<

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users