[Snort-users] Sensor overload - Too much traffic for Snort box?

Fábio a.k.a Fósforo fosforo at ...11827...
Fri Jun 8 23:59:10 EDT 2007

I would recommend to install a network/process monitoring tool like
monit (http://www.tildeslash.com/monit/) or zabbix (i've never tried
it), and like Benjamin Smal propose, see which parameter from /proc to
change after reading the reports.


On 6/8/07, Ray H. <snort at ...14147...> wrote:
> Having some trouble with dropped packets. Wondering if my snort box is under
> powered or if I have my monitor session setup incorrectly, or something I'm
> just overlooking.
> Any help would be greatly appreciated. I've tried to include all relevant
> information pertaining to my issue with dropped packets.

More information about the Snort-users mailing list