Snort mailing list archives

Re: Poor performance with Snort 2.9.4.6 under OpenBSD 5.3


From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 13 Jun 2013 12:32:13 -0400

On 6/13/2013 10:18, C. L. Martinez wrote:
On Thu, Jun 13, 2013 at 2:12 PM, Joel Esler<jesler () sourcefire com>  wrote:
On May 31, 2013, at 2:51 AM, C. L. Martinez<carlopmart () gmail com>  wrote:

CPU0 states:  2.8% user,  0.0% nice,  0.4% system, 20.4% interrupt, 76.4%
idle

This tells me from the thread that you have Snort dropping traffic, and CPU
load is very low.  So, that indicates to me that the problem is external to
Snort?

Uhmm... this was when I am using SMP kernel. Actually, I am using
kernel for single processor ...

yes and since then, you have also changed the libpcap that was being used... i 
would say that the old libpcap you were using is "external to snort"... wouldn't 
you? ;)

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: