[Snort-users] Snort running at 99% CPU

Blake Frantz blake at ...319...
Sun Nov 4 08:25:02 EST 2001


Devdas,

Are you running 2.4.3?  Monday I will install 2.4.13 and 2.2.x and let
you know if I see any differences.  I think we may be onto something with
the kernel version.

<snip>
Date: Sat, 3 Nov 2001 15:26:49 -0800
From: Steven P. Donegan <steve at ...3789...>
To: Blake Frantz <blake at ...319...>
Subject: RE: [Snort-users] Snort running at 99% CPU
 
I think 7.1 shipped with a 2.4.3 kernel - known to have some weirdness -
perhaps try going to 2.4.13 (current)?
</snip>

-Blake

> Blake, could you try this on a 2.2.x kernel? I am not sure about this,
> but given that I get similar problems with squid on 2.4.x, I think its
> not a snort problem but a glibc/kernel problem.
> Squid on my system (PIII 600, 1GB ram, 2.4.x any) and snort here both 
> show similar problems (gettimeofday()).
> 
> Devdas Bhagat
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 





More information about the Snort-users mailing list