Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 18 replies
  • Subscribers 2 subscribers
  • Views 93083 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

snort excessive cpu

aimeedev
Hi

I have just enables snort, and while investigating slow throughput, I discovered snort running at nearly 100%.

Is this a known issue?

UTM9 9.208-8
Pattern 70573

Tks
Aimee


This thread was automatically locked due to age.
Parents
  • 0
    Your logic isn't sound.  Your p-4 is simply too weak to handle a modern snort implementation along with utm.  At 12 megabits a modern atom could stuff that with snort running. Snort by itself is still too intensive for your current hardware.  If you wanted to do snort by itself..no utm install and you manually tuning sure you could do it.  The short and correct answer is..get a faster cpu, at least 4 gig of ram...and you will NOT have this issue.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • 0
    Your logic isn't sound.  Your p-4 is simply too weak to handle a modern snort implementation along with utm.  At 12 megabits a modern atom could stuff that with snort running. Snort by itself is still too intensive for your current hardware.  If you wanted to do snort by itself..no utm install and you manually tuning sure you could do it.  The short and correct answer is..get a faster cpu, at least 4 gig of ram...and you will NOT have this issue.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
No Data
Cookie Information Banner