Hi there !
I'm having a huge 100% cpu utilisation all the time with the last rpm smeserver-snort-2.6.0-2.i386.rpm and all up to date rpms needed
I've deinstalled all the needed rpms, suppressed folders and sql bases as told on the download area and cpu utilisation gets back to 2% !!!
I tryed another install, with the old rpm version smeserver-snort-2.4.4-2.i386.rpm. cpu utilisation is better, but still it's at 35-50% all the time...
Is that normal ??? Normally, i'm near 2-10% max...
Then, i tested a scan+vulnerabilities probe (server-only, scan from lan) and snort+guardiand didn't blacklist me... Is that normal too ?