[Snort-users] Snort with multiple threads

Emilio Mira Alfaro emial at ...4389...
Tue Mar 12 02:54:22 EST 2002

Hi all.

I'm trying to run Snort with threads listening two interfaces, one of
them with incoming traffic and the other one with outgoing traffic.

After one minute aprox, when all is apparently running ok, CPU usage
stops and snort threads do nothing, but I can see them with ps

  PID TTY          TIME CMD
 1211 pts/0    00:00:00 snort_pthreads
 1212 pts/0    00:00:00 snort_pthreads
 1213 pts/0    00:00:14 snort_pthreads
 1214 pts/0    00:00:34 snort_pthreads

I'm running snort 1.8.4-beta4 compiled from tarball under RH7.2 with
default configuration, but I had the same problem with snort 1.8.3
(1.8.2?) and RH6.2.

Thanks in advance.

Emilio Mira
e-mail: emial at ...4389...

More information about the Snort-users mailing list