Snort mailing list archives
Snort stopping - too much traffic?
From: Scott Williams <Sawilliams () mdch com>
Date: Mon, 28 Oct 2002 16:13:05 -0700
I'm running Snort with a 100MB NIC and everything was fine until I started sending it more traffic. I'm now sending about 40Mbps to it and it will run for an hour or so and then stop. I get the syslog message "kernel: eth1: Too much work in interrupt, status e401". I wonder if this is what happens when the NIC buffers get too full. Anyone had a similar experience?
Current thread:
- Snort stopping - too much traffic? Scott Williams (Oct 28)
- Re: Snort stopping - too much traffic? Erek Adams (Oct 28)
- how to log everything to log file? s.wun (Oct 28)
- Re: how to log everything to log file? Erek Adams (Oct 28)
- how to log everything to log file? s.wun (Oct 28)
- <Possible follow-ups>
- RE: Snort stopping - too much traffic? Scott Williams (Oct 29)
- RE: Snort stopping - too much traffic? Wayne T Work (Oct 29)
- Re: Snort stopping - too much traffic? Erek Adams (Oct 28)