Hi, I have a 30mbps symmetric internet link attached to the red interface of my Endian 2.2RC3 firewall running in a Xen VM on a Dell R200 Quad Core X3230, 2.66GHz/2x4M 1066FSB. The Endian VM has 1 processor and 128MB memory allocated.
I noticed that my download speed is around 20mbps max instead of the 30mbps the link provides. On the Endian machine I see that snort takes nearly 100% when downloading. When I disable snort the CPU load is back to 0 and my download speed is back to 30mbps. Is it normal for snort to use that much CPU? Is there a way to reduce the amount of CPU snort uses? Do I need snort? -Bart ------------------------------------------------------------------------------ _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user