Re: perfprofiling not working

["Lawrence R. Hughes, Sr." <lhughes () safemedia com>]

Joel,

We got it working, we were stopping snort with a linux kill -9 <pid> rather than a killall snort.

Thanks,
Larry


  ----- Original Message ----- 
  From: Joel Esler 
  To: Lawrence R. Hughes, Sr. 
  Cc: snort-users () lists sourceforge net 
  Sent: Friday, February 18, 2011 6:14 PM
  Subject: Re: [Snort-users] perfprofiling not working


  How are you running Snort?  You can't run it with something like a -D.


  You have to run it in the current console against traffic, or against a pcap to get the results for perfprofiling.


  Joel


  On Feb 18, 2011, at 6:00 PM, Lawrence R. Hughes, Sr. wrote:


    Hi,

    We compiled snort with --Perfprofiling, but when we add the following line to our snort.conf file it does not work:

    config profile_rules: print 50, sort avg_ticks

    Any ideas?

    Thanks,
    Larry


    ------------------------------------------------------------------------------
    The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
    Pinpoint memory and threading errors before they happen.
    Find and fix more than 250 security defects in the development cycle.
    Locate bottlenecks in serial and parallel code that limit performance.
    http://p.sf.net/sfu/intel-dev2devfeb_______________________________________________
    Snort-users mailing list
    Snort-users () lists sourceforge net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users


  --
  Joel Esler
  jesler () sourcefire.com
  http://blog.snort.org && http://blog.clamav.net

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users