Snort mailing list archives

Re: Snort running at 99% CPU


From: Devdas Bhagat <devdas () worldgatein net>
Date: Sun, 4 Nov 2001 12:50:31 +0530

On 04/11/01 01:00 -0500, Martin Roesch wrote:
Ok, if this isn't a FAQ yet it should be.  This happens frequently when
Snort is setup with MySQL support.  I'm not 100% sure of the reason why
still, but there is a correlation between 99% CPU utilization on
Snort+MySQL and Linux.  You might think about trying out barnyard or a
different database as a solution.
Blake, could you try this on a 2.2.x kernel? I am not sure about this,
but given that I get similar problems with squid on 2.4.x, I think its
not a snort problem but a glibc/kernel problem.
Squid on my system (PIII 600, 1GB ram, 2.4.x any) and snort here both 
show similar problems (gettimeofday()).

Devdas Bhagat

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: