[Snort-users] Snort 70%/80% CPU Usage on NT4.0

Michael Davis mike at ...92...
Mon Mar 11 18:47:02 EST 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I would stick soem more RAM in there.

Also, the amount of CPU snort uses depends on how your rulesets are
defined. If you log every packet or some nasty CPU intensive
comparisions on many packets then the CPU will spike.

Michael Davis
Chief Technical Officer
Data Nerds, LLC.
http://www.datanerds.net
- ----- Original Message ----- 
From: "Hever C. Rocha - N.O.C" <hever at ...5283...>
To: <snort-users at lists.sourceforge.net>
Sent: Monday, March 11, 2002 7:11 AM
Subject: [Snort-users] Snort 70%/80% CPU Usage on NT4.0


> Hi Everyone! 
> 
> I'm testing Snort 1.8.3 (MySQL Bynary) with the Windows 
> NT 4.0 (Service Pack 6a and hofix's)and Mysql (for the 
> logs) 
> 
> When i'm send massive attacks for the test machine, like 
> IISDOS, the snort process increase the 
> use of the cpu computer (70% /80 %). 
> My network is a 10/100 Mbits, with the two computers 
> (the client and the snort machine) in the same segment. 
> 
> My Hardware is: 
> 
> Server (Where Snort is running) 
> PC Computer 
> CPU Pentium 233 Mhz 
> 64 MB RAM 
> IDE Hard Disk 3.2 
> 
> It's Normal? and I need a better computer(Like Pentium III 800/
> 128/256 MB RAM SCSI Hard disk )?
> Best Regards from Brasil 
> 
> 
> Hever Costa Rocha
> N.O.C
> 55 (73) 234-3029
> 55 (73) 9133-0107
> email: hever at ...5283...
> www.itcbrasil.com.br
> 
> 
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPI1sAPiUqZ9dnoKsEQIt3wCg4jCY5Pyt2f6HvshZ4jiDY6FTgUEAnjiq
9E+lEIHxDVfWYMw06K0noKAw
=TInf
-----END PGP SIGNATURE-----






More information about the Snort-users mailing list