[Snort-users] snort 2.9.3 - PreProcessor Profile stats for PCRE

jbox2705 jbox2705 at ...11827...
Thu Jun 28 06:52:38 EDT 2012


Hi All,

Running Snort 2.9.3 on freebsd 9.0.

Looking at the Sonrt's pref. data show 80% packet drop and no data
processing in irregular intervals.

Turned on PreProcessor Profile stats that shows the PCRE "Checks" and
"Exists" differ (99% did not "exit").

The snort.conf file has no "pcre_match_limit" or
"pcre_match_limit_recursion" configured.

The server is not stressed out and have enough free memory.

Did anyone came across similar problem ? any suggestions ?

Thanks,

Jbox
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120628/19275cc9/attachment.html>


More information about the Snort-users mailing list