[Snort-users] Multiple Snort Instances - One Interface

Will Metcalf william.metcalf at ...11827...
Mon Nov 1 13:14:09 EDT 2010


>On Mon, Nov 1, 2010 at 10:57 AM, Jim Hranicky <jfh at ...5250...> wrote:
> On Mon, 1 Nov 2010 11:52:26 -0400
> Jim Hranicky <jfh at ...5250...> wrote:
>
>> That was 5 minutes ago...I'm now up to ~7M Received/Analyzed per process
>> without a drop on any.
>
> Hmm...It doesn't look like this config likes to receive too many -USR1s :
>
>  Can't acquire (-1) - pfring_read() errpr!
>
> Still, amazing stuff.

I will have a look when I get my head above water ;-)...

Regards,

Will




More information about the Snort-users mailing list