RE: statistics that Snort can do

["Kreimendahl, Chad J" <Chad.Kreimendahl () umb com>]

of note...
you appear to only be able to -USR1 a snort 1 time... it dies the second
time you -USR1 it.  (my experience... on solaris...)

There's also a semi-undocumented way to dump stats (perfstats) at
selected intervals... I believe there is info in the snort.conf file
about this.

-----Original Message-----
From: Erek Adams [mailto:erek () snort org] 
Sent: Monday, June 16, 2003 2:34 PM
To: Francesco
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] statistics that Snort can do


On Mon, 16 Jun 2003, Francesco wrote:

> If and when you exit Snort, you can get a statistics report of some
> significance.
> The point is you only get them (including the package drop rate) when
you
> exit !
>
> I suppose it would be good the user could monitor these data anytime.
> I looked at the command line but I find no option available for this
purpose.
> Am I wrong? any idea how to do that?
>
> Please do not say use Acid or something else.. I'd like to know if we
can
> get these info straight from Snort. At first.

        kill -USR1 <snort_pid>

Will dump them into syslog.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users