Snort mailing list archives
Re: Second Snort instance killing performance
From: Szymon Miotk <spam () crocom com pl>
Date: Thu, 08 Sep 2005 15:47:01 +0200
Paul Melson wrote:
I've just run into an interesting situation with one of my Snort sensors. I've added another interface attached to a new span port to my existing sensor box and I want to run a second Snort process for that interface. Same binary, same logs, but different config file and rule set for eachprocess.
If you are using same logs maybe performance suffers becouse those two processes are fighting for access to the same logs?
Szymon Miotk ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Second Snort instance killing performance Paul Melson (Sep 07)
- Re: Second Snort instance killing performance Alex Butcher, ISC/ISYS (Sep 08)
- Re: Second Snort instance killing performance Jason Haar (Sep 08)
- Re: Second Snort instance killing performance Alex Butcher, ISC/ISYS (Sep 09)
- RE: Second Snort instance killing performance Paul Melson (Sep 08)
- RE: Second Snort instance killing performance Alex Butcher, ISC/ISYS (Sep 09)
- Re: Second Snort instance killing performance Jason Haar (Sep 08)
- Re: Second Snort instance killing performance Szymon Miotk (Sep 08)
- RE: Second Snort instance killing performance Paul Melson (Sep 08)
- Re: Second Snort instance killing performance snort sara (Sep 12)
- Re: Second Snort instance killing performance Murali Raju (Sep 12)
- RE: Second Snort instance killing performance Paul Melson (Sep 12)
- Re: Second Snort instance killing performance Marc Norton (Sep 19)
- Re: Second Snort instance killing performance Alex Butcher, ISC/ISYS (Sep 08)