Snort mailing list archives

snort perf monitoring


From: John Hally <JHally () epnet com>
Date: Fri, 22 Jul 2005 08:41:42 -0400

Hello All,

 

I was wondering how I would go about monitoring the performance of the snort
process.  I think I've successfully implemented PF_RING and I guess I'm
looking for proof that it's working the way I think it is.  I currently have
Ntop running using the PF_RING libpcap and it looks like it's performing
well based on its built in perf stats on dropped packets by pcap or the ntop
process.  I'm just not sure if there's an easy way to do the same with
snort.  Is there possibly an snmp hook into the process where I could grab
stats using an mrtg/cricket like app.

 

Thanks!


Current thread: