[Snort-users] Snort with multiple threads
fygrave at ...121...
Tue Mar 12 11:11:03 EST 2002
snort threading in v. 1.8.3 is experimental and I highly wouldn't
recommend to use it for anything but development/testing issues. Guess
snort 2.x will have threads imprelmented as part of design which would
make them more functional :-)
Emilio Mira Alfaro <emial at ...4389...> spoke:
> Hi all.
> I'm trying to run Snort with threads listening two interfaces, one of
> them with incoming traffic and the other one with outgoing traffic.
> After one minute aprox, when all is apparently running ok, CPU usage
> stops and snort threads do nothing, but I can see them with ps
> PID TTY TIME CMD
> 1211 pts/0 00:00:00 snort_pthreads
> 1212 pts/0 00:00:00 snort_pthreads
> 1213 pts/0 00:00:14 snort_pthreads
> 1214 pts/0 00:00:34 snort_pthreads
> I'm running snort 1.8.4-beta4 compiled from tarball under RH7.2 with
> default configuration, but I had the same problem with snort 1.8.3
> (1.8.2?) and RH6.2.
> Thanks in advance.
> Emilio Mira
> e-mail: emial at ...4389...
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7 B288 5CE5 A713 0969 A4D1
More information about the Snort-users