[Snort-users] Multiple Snort Instances - One Interface

Jim Hranicky jfh at ...5250...
Mon Nov 1 11:57:35 EDT 2010

On Mon, 1 Nov 2010 11:52:26 -0400
Jim Hranicky <jfh at ...5250...> wrote:

> That was 5 minutes ago...I'm now up to ~7M Received/Analyzed per process 
> without a drop on any.

Hmm...It doesn't look like this config likes to receive too many -USR1s : 

  Can't acquire (-1) - pfring_read() errpr!

Still, amazing stuff.

Jim Hranicky
IT Security Engineer
Office of Information Security and Compliance
University of Florida

More information about the Snort-users mailing list