Snort mailing list archives

overloaded system after upgrading


From: Yossi Asayag <yasayag () gmail com>
Date: Mon, 12 Dec 2011 14:19:50 +0200

Hi again

after having no response I thought that the following describe will help getting more information... The preprocessors which I use are: frag3, stream5, prefmonitor, http_inspact, ssl

The memcap from frag3 and streem5 were reduced to less then 10% from the value which worked fine in the last version. AND a lot of packets are still been dropped. The cpu works on 100%.

I'd glad to have some help bringing my system back to the optimal performance.

tnx

yossi




-------- Original Message --------
Subject:        overloaded system after upgrading
Date:   Mon, 12 Dec 2011 12:03:33 +0200
From:   Yossi Asayag <yasayag () gmail com>
To:     snort-users () lists sourceforge net



Hallo there,

after upgrading my snort version into the new version 2.9.1. the machine
is overloaded and drop a lot of entities even though I´v matched the new
config file (inserted the values from the recent config file - which
worked perfectly). Have someone an idea what could be the reason and how
can I bring my system back to the optimal performance?

Thanks

Yoas



------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: