[Snort-users] statistics that Snort can do

Kreimendahl, Chad J Chad.Kreimendahl at ...4716...
Mon Jun 16 22:09:07 EDT 2003

of note...
you appear to only be able to -USR1 a snort 1 time... it dies the second
time you -USR1 it.  (my experience... on solaris...)

There's also a semi-undocumented way to dump stats (perfstats) at
selected intervals... I believe there is info in the snort.conf file
about this.

-----Original Message-----
From: Erek Adams [mailto:erek at ...950...] 
Sent: Monday, June 16, 2003 2:34 PM
To: Francesco
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] statistics that Snort can do

On Mon, 16 Jun 2003, Francesco wrote:

> If and when you exit Snort, you can get a statistics report of some
> significance.
> The point is you only get them (including the package drop rate) when
> exit !
> I suppose it would be good the user could monitor these data anytime.
> I looked at the command line but I find no option available for this
> Am I wrong? any idea how to do that?
> Please do not say use Acid or something else.. I'd like to know if we
> get these info straight from Snort. At first.

	kill -USR1 <snort_pid>

Will dump them into syslog.


Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list