[Snort-users] Snort stopping - too much traffic?

Scott Williams Sawilliams at ...7337...
Mon Oct 28 15:14:02 EST 2002

I'm running Snort with a 100MB NIC and everything was fine until I started
sending it more traffic. I'm now sending about 40Mbps to it and it will run
for an hour or so and then stop. I get the syslog message "kernel: eth1: Too
much work in interrupt, status e401". I wonder if this is what happens when
the NIC buffers get too full. Anyone had a similar experience?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20021028/80c89f64/attachment.html>

More information about the Snort-users mailing list