[Snort-users] Multiple Snort Instances - One Interface
jfh at ...5250...
Mon Nov 1 11:57:35 EDT 2010
On Mon, 1 Nov 2010 11:52:26 -0400
Jim Hranicky <jfh at ...5250...> wrote:
> That was 5 minutes ago...I'm now up to ~7M Received/Analyzed per process
> without a drop on any.
Hmm...It doesn't look like this config likes to receive too many -USR1s :
Can't acquire (-1) - pfring_read() errpr!
Still, amazing stuff.
IT Security Engineer
Office of Information Security and Compliance
University of Florida
More information about the Snort-users