After 4 days of working. The WinIDS is not opening every time when I ask http://winids/

Some times is opening (after long time), some times is writing: "PHP Fatal error: Maximum execution time of 60 seconds exceeded in D:winidsinetpubwwwrootbasebase_conf.php on line 21"

This is happening because you have a gazillion events being processed and the Windows Intrusion Detection Systems (WinIDS) security console is working overtime.

 

Open the php.ini and change:

 

Original Line(s): max_execution_time = 60
Change to: max_execution_time = xx
 

Change the xx to accommodate the time required.

 

My guess is that you are processing hundreds of thousands if not millions of events that are irrelevant. Try adjusting the preprocessors and the rules to accommodate your specific needs. If you need help doing this join the snort-users mailing list. You will find a lot of advanced uses that are willing to help. 

Thank you for your reply!

I will do it in monday!

In attach my statistic for 1 week.....it is not so big....I did not changed any rules, preprocessors.

If you are still getting these timeout errors, you may need to look at physical memory, or possibly a memory managemet problem?