[Snort-users] Multiple Snort Instances - One Interface
Will Metcalf
william.metcalf at ...11827...
Mon Nov 1 13:14:09 EDT 2010
>On Mon, Nov 1, 2010 at 10:57 AM, Jim Hranicky <jfh at ...5250...> wrote:
> On Mon, 1 Nov 2010 11:52:26 -0400
> Jim Hranicky <jfh at ...5250...> wrote:
>
>> That was 5 minutes ago...I'm now up to ~7M Received/Analyzed per process
>> without a drop on any.
>
> Hmm...It doesn't look like this config likes to receive too many -USR1s :
>
> Can't acquire (-1) - pfring_read() errpr!
>
> Still, amazing stuff.
I will have a look when I get my head above water ;-)...
Regards,
Will
More information about the Snort-users
mailing list