This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS / snort causing 100% cpu load

Hello,

i have big problems using IPS since a few versions. Sometimes it works fine, most of the time i have to switch it off because it utilize 100 % cpu load.

i did no adjustments to the ootb configuration there, but it don`t work out very well.

When IPS works normally there is usually enough free memory and the cpu load is also unobtrusive so i think that the snort process hangs sometimes but i don`t know whats causing this.

On what should i look for on the ips log to get an idea of the cause?


This thread was automatically locked due to age.
Parents
  • Considering your signature you need new utm appliances.  Those are quickly approaching end of life and do not have the ram or CPU for the current utm requirements much less upcoming requirements.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • Considering your signature you need new utm appliances.  Those are quickly approaching end of life and do not have the ram or CPU for the current utm requirements much less upcoming requirements.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
No Data