[Snort-devel] snort-2.0 (really) high cpu utilization

Nathan W. Labadie ab0781 at ...839...
Thu Nov 7 13:59:06 EST 2002

I've been running into the following problem with the latest (within the
last two weeks) CVS builds of snort. For no apparent reason, snort will
jump to 99.9% cpu utilization and stops processing packets. This happens
after a random amount of time and can only be fixed by restarting snort.
I'm guessing that snort is getting "stuck" on some type of packet, but
due to the high volume of traffic (around 90 Mbps) it'd be impossible to
do a capture to run snort against to isolate the packet.

Any suggestions on how to debug this?


Nathan W. Labadie       | ab0781 at ...839...	
Sr. Security Specialist | 313-577-2126
Wayne State University  | 313-577-1338 fax
C&IT Information Security Office: http://security.wayne.edu

More information about the Snort-devel mailing list