Justin wrote: > When I checked the p0f process was still running. The version of perl I > am running is from Debian [testing]:
> $ perl -v > This is perl, v5.8.8 built for i486-linux-gnu-thread-multi > Has anyone reported something like this before? > PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > 959 root 25 0 4676 2492 1760 R 99 0.1 871:05.39 p0f-analyzer.pl > Justin. I have been running p0f-analyzer.pl (and the patch) for 4 days on a Debian Sarge system - no problem so far. This server only sees about 3,000 messages per day however (and I don't have 127 users connected either). I see you have a much much busier box. /usr/sbin/p0f -l 'tcp dst port 25' 2>&1 | /usr/sbin/p0f-analyzer.pl 2345 & PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2522 root 16 0 4400 2396 3400 S 0.0 0.3 0:02.00 p0f-analyzer.pl Gary V ____________________________________________________________ Policyd-weight Mailinglist - http://www.policyd-weight.org/
