-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mike Johnson- Southwestech Computers wrote: > > > Garrett Cooper wrote: > >> >> Go to the console and run top or ps a. Then determine what process >> (over a period of time) increases in memory size, and what processes >> stay essentially static. The process that increases in size (column >> should say "RSS") is your "problem process". Email the results back to >> the list after you've determined the "problem process". >> Cheers, >> - -Garrett >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v2.0.1 (FreeBSD) >> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org >> >> iD8DBQFFk258EnKyINQw/HARAgFzAKCoxPZJ/HPQAn3utzBbu5GxLre1BACfcTtO >> LW1F7Rvrnb7BDGuPv6e16Ns= >> =O5rw >> -----END PGP SIGNATURE----- >> >> > > Thanks! I have found a process in there that I had forgotten about > trying moons ago when I first got the install running. Snort is showing, > but its state is bpf. I had removed that package using the GUI. Is it > possible that package did not come out clean? Whether it did or not, it > came back... strange. If so, is there a method of removal from the shell > in the hopes that it comes out clean? > > Mike
Removal from the shell? Not sure how to go about that using pfsense (since pfsense is a hacked freebsd system), but you may want to disable snort and then remove it via the webgui. Not sure what the bpf state is (can't find any documents off-hand about it), but I'll inquire on the freebsd-net list to see if anyone else knows what it is. - -Garrett -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.1 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFk/QmEnKyINQw/HARAlfvAJ0bmrv6NMOKUI4xWxJdUq3bk87MKwCfSYdO WZ30Z7FLs51h6h8Er5ceB1U= =vxz8 -----END PGP SIGNATURE-----
