Snort mailing list archives
Re: Perfmonitor preprocessor feilds
From: Jason Brvenik <jasonb () sourcefire com>
Date: Fri, 04 Nov 2005 10:13:02 -0500
Give pmgraph a try - http://people.su.se/~andreaso/perfmon-graph/ Robin Polak wrote:
Hello all,
I have been working on optimizing my snort sensors so I configured
perfmonitor like so preprocessor perfmonitor: time 30 file stats.profile
to get a look inside of snort's runtime. However the data set that it
returns in the CSV has more columns than is listed in the documentation
for the preprocessor. I have attached a CSV with the first line listing
what values I believe they are can you help me label the others. Also
if I add flow and events the output doesn't change.
--
Robin Polak
Robin Polak Computer Consulting
E-Mail: robin.polak () gmail com <mailto:robin.polak () gmail com>
V. 917-494-2080
F. 718-549-4569 (By Request)
------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Perfmonitor preprocessor feilds Robin Polak (Nov 04)
- Re: Perfmonitor preprocessor feilds Jason Brvenik (Nov 04)
