[Snort-users] Poor performance with Snort under OpenBSD 5.3

waldo kitty wkitty42 at ...14940...
Thu Jun 13 12:32:13 EDT 2013

On 6/13/2013 10:18, C. L. Martinez wrote:
> On Thu, Jun 13, 2013 at 2:12 PM, Joel Esler<jesler at ...1935...>  wrote:
>> On May 31, 2013, at 2:51 AM, C. L. Martinez<carlopmart at ...11827...>  wrote:
>> CPU0 states:  2.8% user,  0.0% nice,  0.4% system, 20.4% interrupt, 76.4%
>> idle
>> This tells me from the thread that you have Snort dropping traffic, and CPU
>> load is very low.  So, that indicates to me that the problem is external to
>> Snort?
> Uhmm... this was when I am using SMP kernel. Actually, I am using
> kernel for single processor ...

yes and since then, you have also changed the libpcap that was being used... i 
would say that the old libpcap you were using is "external to snort"... wouldn't 
you? ;)

NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

More information about the Snort-users mailing list