[Snort-users] Can I 'nice' snort process?

Tran, John jtran at ...4530...
Thu Jan 10 10:09:04 EST 2002


I'm running snort on one of my web servers as a local IDS (don't ask me why,
let's just go along w/ it for now..) and it takes up massive amounts of CPU
(40%), which can be expected considering it's a large amount of traffic.  It
was suggested to me to run 'nice' on the process to throttle it's CPU usage,
but I'm pretty sure throttling snort will cause it to drop a lot of packets.
Is this true?




More information about the Snort-users mailing list