[Snort-users] Snort 1.8 more CPU intensive?

Mayers, Philip J p.mayers at ...1913...
Wed May 2 14:55:33 EDT 2001

Running snort 1.7 with the Whitehats rules, and snort 1.8 (CVS) from the
1.8-specific whitehats rules, 1.7 seemed to idle at about 50% on
10-100Mbits, and snort 1.8 at about 100% on the same load. Is this expected?
RedHat 6.2 machine on a Sun Ultra 5. Disk IO is minimal, since I filter a
lot out at the BPF point.


| Phil Mayers, Network Support     |
| Centre for Computing Services    |
| Imperial College                 |

More information about the Snort-users mailing list