Snort uses 90% of CPU

[babu dheen <babudheen () yahoo co in>]

Dear All,
 
 
       In recent past, we are experiencing high CPU usage on one of Astaro firewall where Snort -IPS functionality is 
enabled.  Snort almost consumes 90% of the CPU. During such time, we could see only one snort instance used to run and 
could not find name of the signature which causing high CPU usage and because of this high cpu usage all TCP connection 
keep getting dropped.  To solve this problem, we had to reboot the Astaro firewall device. Would like to know why snort 
uses high CPU or in which situation snort can consume more CPU usage.
 
       Is there any way to find out which signature consumes more CPU in snort during high CPU usage time?
 
 
Regards
Babu 
 

------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!