[Snort-devel] Snort problems with low processor?

Chris Green cmg at ...402...
Tue Mar 19 06:22:03 EST 2002


Agazzini Maurizio <maurizio at ...1202...> writes:

> Hello ml,
> I got a problem with snort, I'm running on a 486 dx2 66Mhz OpenBSD 2.9
> on ADSL, with snort 1.8.3 (it's the same with the 1.9 devel), some times
> (I haven't undestand when) snort go to high processor utilisation and
> will never decrase... someone know why or a possible cause? I did
> some test, as with full bandwith in download, (640Kb/s) but no result...
> only sometimes it did that...

>
> #ps aux
> USER       PID %CPU %MEM   VSZ   RSS TT   STAT STARTED       TIME COMMAND
> root     25149 97.8  7.1  7992  2304 p0- R      8:26PM  315:22.18
> /usr/local/bin/snort -c /etc/snort/snort.conf -N
>

That machine is really too slow to run snort effectively.  What
configuration options/preprocessors do you have enabled?


-- 
Chris Green <cmg at ...402...>
"I'm beginning to think that my router may be confused."





More information about the Snort-devel mailing list