[Snort-users] View perfmonitor stats file

Jeremy Hoel jthoel at ...11827...
Thu May 1 16:14:50 EDT 2014


We've also done some parsing of that file for zabbix.. if that would be
helpful.  there's a lot of data there.


On Thu, May 1, 2014 at 7:59 PM, Joel Esler (jesler) <jesler at ...589...>wrote:

>  http://www.snort.org/snort-downloads/additional-downloads/#thepigdoktah
>
>
>  On May 1, 2014, at 3:20 PM, Kurzawa, Kevin <kkurzawa at ...16800...>
> wrote:
>
>    I’m trying to tune Snort. I turned on perfmonitor and have it set as
> such:
>  preprocessor perfmonitor: time 300 file /var/log/snort/stats pktcnt 10000
>
>  However, that stats file is nearly impossible to read. Can anyone offer
> some suggestions on how to better view this? I didn’t see anything when I
> searched for it. I would like to be able to read it from the command line
> on the IDS server itself (no X on the IDS).
>
>  Running on Archlinux.
>
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
>
> http://p.sf.net/sfu/SauceLabs_______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
>
>
>
> ------------------------------------------------------------------------------
> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
> Instantly run your Selenium tests across 300+ browser/OS combos.  Get
> unparalleled scalability from the best Selenium testing platform available.
> Simple to use. Nothing to install. Get started now for free."
> http://p.sf.net/sfu/SauceLabs
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140501/a50c045a/attachment.html>


More information about the Snort-users mailing list