[Snort-users] Multiple Snort Instances - One Interface

[Will Metcalf]

>On Mon, Nov 1, 2010 at 10:57 AM, Jim Hranicky <jfh at ...5250...> wrote:
> On Mon, 1 Nov 2010 11:52:26 -0400
> Jim Hranicky <jfh at ...5250...> wrote:
>
>> That was 5 minutes ago...I'm now up to ~7M Received/Analyzed per process
>> without a drop on any.
>
> Hmm...It doesn't look like this config likes to receive too many -USR1s :
>
>  Can't acquire (-1) - pfring_read() errpr!
>
> Still, amazing stuff.

I will have a look when I get my head above water ;-)...

Regards,

Will