This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

snort excessive cpu

Hi

I have just enables snort, and while investigating slow throughput, I discovered snort running at nearly 100%.

Is this a known issue?

UTM9 9.208-8
Pattern 70573

Tks
Aimee

This thread was automatically locked due to age.

Parents

0 BarryG over 10 years ago

1GB of RAM is quite low for the UTM.

If you're only using the IPS, it may run fine for a while, but an up2date or reporting will push it over the top.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 10 years ago

1GB of RAM is quite low for the UTM.

If you're only using the IPS, it may run fine for a while, but an up2date or reporting will push it over the top.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Sascha Paris over 10 years ago in reply to BarryG

William and Barry are absolutely right.

a) 1Gig Mem is out of date for todays UTMs. 2Gig is absolute Minimum for a productive enviroment, from 4Gigs upwards its fun.
b) a P4 is in view of todays CPU performance a "old snail". If we compare a really fast, high clocked 3,6GHz P4 to actual CPUs, see yourself here: P4 vs. todays CPUs - I think the chart speaks for itself [;)]

So you won't be able to get any useable IPS performance out of a P4, because it's not only missing CPU performance, it's also slow caches, slow memory and chipset around the CPU...

I also like to tweak and tune undersized machines for fun to see what the're still capable of....but I'd never would recommend that for daily or productive use...

[H]
Cancel
Vote Up 0 Vote Down

Cancel