[Snort-users] Performance profiling not working snort 2.8.6

Andy Berryman aberryman at ...14765...
Mon Sep 13 13:21:28 EDT 2010


It is started with this command, if that is what you are asking for.
It's running in IDS mode.

 

LD_LIBRARY_PATH=/snort/libs /snort/snort -D -N -i eth1 -c
/snort/conf/snort.conf

 

Thanks,

Andy Berryman

 

 

 

From: Joel Esler [mailto:jesler at ...1935...] 
Sent: Monday, September 13, 2010 12:17 PM
To: Andy Berryman
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Performance profiling not working snort 2.8.6

 

How are you running Snort?

 

Joel

 

On Sep 13, 2010, at 12:49 PM, Andy Berryman wrote:





I have performance profiling turned on and am trying to some
diagnostics. But no file is being created when snort restarts and the
preprocessors aren't being profiled. The only thing that is working is
the "preprocessor perfmonitor:"

 

This is the options we've compiled snort with.

--enable-decoder-preprocessor-rules --enable-dynamicplugin
--enable-perfprofiling --enable-gre --enable-timestats
--enable-linux-smp-stats --enable-targetbased --enable-corefiles

 

Here's my snort.conf:

 

config profile_preprocs

config profile_rules: print 100, sort total_ticks, filename
/var/log/perf.txt

preprocessor perfmonitor: \

time 30 events flow max console pktcnt 10000



 


###############################################################################
This message from Cymtec Systems, Inc. contains confidential information and is solely for the use of the recipient(s) named above.  If you are not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this message in error and that any review, disclosure, copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message in error, please destroy it immediately and notify Cymtec Systems, Inc. by telephone at +1.314.993.8700 or by return e-mail.                    
###############################################################################
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100913/ad3a4568/attachment.html>


More information about the Snort-users mailing list