[Snort-users] statistics that Snort can do

Kreimendahl, Chad J Chad.Kreimendahl at ...4716...
Mon Jun 16 22:09:07 EDT 2003


of note...
you appear to only be able to -USR1 a snort 1 time... it dies the second
time you -USR1 it.  (my experience... on solaris...)

There's also a semi-undocumented way to dump stats (perfstats) at
selected intervals... I believe there is info in the snort.conf file
about this.

-----Original Message-----
From: Erek Adams [mailto:erek at ...950...] 
Sent: Monday, June 16, 2003 2:34 PM
To: Francesco
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] statistics that Snort can do


On Mon, 16 Jun 2003, Francesco wrote:

>
> If and when you exit Snort, you can get a statistics report of some
> significance.
> The point is you only get them (including the package drop rate) when
you
> exit !
>
> I suppose it would be good the user could monitor these data anytime.
> I looked at the command line but I find no option available for this
purpose.
>
> Am I wrong? any idea how to do that?
>
> Please do not say use Acid or something else.. I'd like to know if we
can
> get these info straight from Snort. At first.

	kill -USR1 <snort_pid>

Will dump them into syslog.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list