The logged snort alert # and the final stat do not match

[Lin.Zhong () Dartmouth EDU (Lin Zhong)]

Hi, I try to run snort on some tcpdump files, and I found a mismatch between the # of alert logged and the # of alert 
found and logged shown in the snort final statistic output. 

The final stat shows that there are 728 alerts found and loged, no passed. But in my alerts log file, I only find 640 
alerts. 

Anybody know what causes this gap? Where do those near 100 alerts go?

Many thanks,

--
Lin 


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users