Snort High load
-
Greetings. I am a new pfsense user and so far everything in this OS is amazing!! So thank you!! I am having one issue that I was not able to find in the forums and that is anytime I access my blocked list my load on the server increases drastically. Mainly php. I was wanting to know what could be done to resolve this. I have gone in and unchecked some rules and whitelisted some ips thinking that might help. The box its on isnt really beafy, but i dont think its a cause from a lack of hardware. P4 2.53 1gb of ram. Any help would be appreciated. Thank you.
-
anyone?!? The big problem is the page wont load and everything pretty much hangs until i log in and kill the php process. Thanks.
-
snort is a known performance problem. Depending on your configuration and network traffic I wouldn't be surprised that a 2.5 GHz P4 causes problems. It could also be that the blocked list is massive and hence that's the problem.
More information will be required to help you, not least of which is more information on your hardware (such as what network cards you are using) and what versions of pfSense and snort you're using.
