|
Why does the LCD display show a high CPU load even though there is a relatively low network load at the moment?
Certain rules (e.g. 'SHELLCODE sparc NOOP' in the group 'shellcode') check the data in all the IP packets for the presence of a specific character sequence. These tests are very hungry in terms of CPU capacity and should be included in the 'Exceptions' list for each sensor, if CPU load is a problem and the rules are not needed.
« back |
