Re: snort processes

[Matt Kettler <mkettler () EVI-INC COM>]

At 01:45 AM 6/19/2003 +0300, Derya Sezen wrote:

> Everybody knows why Snort executes with more than one
> processes(threads), what are their functions one by one!?
>
> thanx


My advice can be summed up in three words.. "read the source"...

I can't see why you'd need to know this unless you were already working 
with the source code anyway.

might I suggest grepping the code for "pthread" as a starting point?

I *think* that OLD snort used to do one thread per interface, and that the 
mysql code also cranks off threads, but current snort 2.0.0 only seems to 
do one thread plus mysql stuff... however I could be wrong, so if you 
really need to know the exact number of threads and why they are there, 
read the source code.

My copy of snort 2.0.0 only appears to have one thread, and it does not use 
sql logging.



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users