[Snort-users] Second Snort instance killing performance
spam at ...7247...
Thu Sep 8 06:48:16 EDT 2005
Paul Melson wrote:
> I've just run into an interesting situation with one of my Snort sensors.
> I've added another interface attached to a new span port to my existing
> sensor box and I want to run a second Snort process for that interface.
> Same binary, same logs, but different config file and rule set for each
If you are using same logs maybe performance suffers becouse those two
processes are fighting for access to the same logs?
More information about the Snort-users