[Snort-users] Snort with multiple threads

Fyodor fygrave at ...121...
Tue Mar 12 11:11:03 EST 2002


snort threading in v. 1.8.3 is experimental and I highly wouldn't
recommend to use it for anything but development/testing issues. Guess
snort 2.x will have threads imprelmented as part of design which would
make them more functional :-)


Emilio Mira Alfaro <emial at ...4389...> spoke:
> Hi all.
> 
> I'm trying to run Snort with threads listening two interfaces, one of
> them with incoming traffic and the other one with outgoing traffic.
> 
> After one minute aprox, when all is apparently running ok, CPU usage
> stops and snort threads do nothing, but I can see them with ps
> command:
> 
>   PID TTY          TIME CMD
>  1211 pts/0    00:00:00 snort_pthreads
>  1212 pts/0    00:00:00 snort_pthreads
>  1213 pts/0    00:00:14 snort_pthreads
>  1214 pts/0    00:00:34 snort_pthreads
> 
> I'm running snort 1.8.4-beta4 compiled from tarball under RH7.2 with
> default configuration, but I had the same problem with snort 1.8.3
> (1.8.2?) and RH6.2.
> 
> Thanks in advance.
> 
> --
> Emilio Mira
> e-mail: emial at ...4389...
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list

-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1




More information about the Snort-users mailing list