Re: Snort with multiple threads

[Fyodor <fygrave () tigerteam net>]

snort threading in v. 1.8.3 is experimental and I highly wouldn't
recommend to use it for anything but development/testing issues. Guess
snort 2.x will have threads imprelmented as part of design which would
make them more functional :-)


Emilio Mira Alfaro <emial () alumni uv es> spoke:
> Hi all.
>
> I'm trying to run Snort with threads listening two interfaces, one of
> them with incoming traffic and the other one with outgoing traffic.
>
> After one minute aprox, when all is apparently running ok, CPU usage
> stops and snort threads do nothing, but I can see them with ps
> command:
>
>   PID TTY          TIME CMD
>  1211 pts/0    00:00:00 snort_pthreads
>  1212 pts/0    00:00:00 snort_pthreads
>  1213 pts/0    00:00:14 snort_pthreads
>  1214 pts/0    00:00:34 snort_pthreads
>
> I'm running snort 1.8.4-beta4 compiled from tarball under RH7.2 with
> default configuration, but I had the same problem with snort 1.8.3
> (1.8.2?) and RH6.2.
>
> Thanks in advance.
>
> --
> Emilio Mira
> e-mail: emial () alumni uv es
>
>
>
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list

-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users