Snort mailing list archives

Re: Snort's configuration.Thanks!!!


From: Jason Brvenik <jasonb () sourcefire com>
Date: Fri, 05 May 2006 08:59:11 -0400

Can you enable the perfmonitor preprocessor and send us the output after
running your tests?

This line should be sufficient assuming your tests last longer than 30 sec

preprocessor perfmonitor: time 30 file /var/log/perfstat pktcnt 10000


Santi Benito wrote:
Hi! First of all thank you for your preocupation, this is the
information that you ask for.
The email is a little bit large, I hope it doesn't bore you.

What version of Snort are you running?
What version of libpcap are you running?
Please cut and paste your command line here.
Please cut and paste your snort.conf here (please remove anything
identifiable as internal.. eg. passwords, home_net..etc.)
Please tell us about your network configuration
Please tell us your hardware configuration.

Thank you Joel and rmkml for your desinterested help
The next lines are the response to this questions:


They have requested standard information needed to begin to help with
this issue.


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: