[Snort-users] Broken Kill USR1 Statistics

Colin Grady colin.grady at ...11827...
Thu Aug 24 09:59:33 EDT 2006


I've been trying to gather some statistics from the Snort process by
sending the USR1 kill signal, but I'm seeing some weird behavior. This
is Snort 2.6.0.1.

First time using kill -USR1:
Aug 24 08:51:32 Sensor snort[24795]: *** Caught Usr-Signal
Aug 24 08:51:32 Sensor snort[24795]: Snort received 7294740 packets
Aug 24 08:51:32 Sensor snort[24795]:     Analyzed: 5628802(77.162%)
Aug 24 08:51:32 Sensor snort[24795]:     Dropped: 1665920(22.837%)
Aug 24 08:51:32 Sensor snort[24795]:     Outstanding: 18(0.000%)

Second time using kill -USR1:
Aug 24 08:51:40 Sensor snort[24795]: *** Caught Usr-Signal
Aug 24 08:51:40 Sensor snort[24795]: Snort received 200871 packets
Aug 24 08:51:40 Sensor snort[24795]:     Analyzed: 5829688(2902.205%)
Aug 24 08:51:40 Sensor snort[24795]:     Dropped: 0(0.000%)
Aug 24 08:51:40 Sensor snort[24795]:     Outstanding: 4289338479(2135369.750%)

Anyone else seen this?

Thanks,
Colin Grady




More information about the Snort-users mailing list