Snort mailing list archives

Re: snort occupy all cpu time?


From: "Ian Macdonald" <secsnort () dirk demon co uk>
Date: Tue, 18 Jun 2002 10:21:50 -0400

What version of snort are you running? Please make sure you are running the
latest version since there were some bugs that would cause what you are
seeing that are fixed in the latest version

Ian
----- Original Message -----
From: "Vincent Chen" <vcba79 () ms1 hinet net>
To: <snort-users () lists sourceforge net>
Sent: Monday, June 17, 2002 8:03 AM
Subject: [Snort-users] snort occupy all cpu time?



Dear all,

I am running snort on amd 486-100 box which equipped cheap
realtek network adapter. Platform is freebsd and snort is monitoring
tun0 interface for an ADSL link. After running a while, this sensor
occupy all CPU time or give me the following message:

Jun 17 18:01:33 bach /kernel: pid 20399 (snort), uid 2: exited on signal
11
Jun 17 18:01:33 bach /kernel: tun0: promiscuous mode disabled

snort exist so often, I have to write a script to monitor it. Any similar
experience or solution for this?

Thanks,




--------------------------------------------------------------------------
--
                   Bringing you mounds of caffeinated joy
                      >>>     http://thinkgeek.com/sf    <<<

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



----------------------------------------------------------------------------
                   Bringing you mounds of caffeinated joy
                      >>>     http://thinkgeek.com/sf    <<<

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: