snort + barnyard + prelude

Hy there prelude users,

I am having serious performance problems with snort + barnyard + prelude
in a high traffic testbed:

Snort + Barnyard are working perfectly well in 'real time'.

When i run prelude-manager, in the first 10m (+-) the whole system runs
perfectly fine, i can see it in prewikka and on a reader agent i
implemented in python(PreludeEasy).

After 10m(+-) i started to experience some delay on events, and 20m+-
the it barnyard stop do send events to prelude-manager. It is not a
problem with barnyard because i can see the events in snort
base(barnyard exports to snort base).

I am using openbsd 4.7 and the latest compiled versions of prelude.

I am runing prelude-manager with the default configurations of the
scheduler priority, i only put more memory on the buffer (default was 1M).

What can be the problem?
:(

Sérgio
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user