Snort mailing list archives
Re: Packet loss
From: Jet <yenjet () gmail com>
Date: Sat, 27 Nov 2004 14:55:44 +0800
I believe the loss packet rate is reported from PCAP library, not by Snort. And it depend on the OS and libpcap version. winpcap = So it reports correct. Libpcap (Linux) = Pls upgrade to version 0.7.2 or above. Using any version older than this will always have 0% loss packet reported. On Fri, 26 Nov 2004 09:05:43 -0600, Cesar Sanabria Pineda <csanab () ife org mx> wrote:
Is there a way to know how many packets snort is loosing?. I mean i suppouse that while snort is processing a packet it's possible that some packets pass without been catched and analized by snort. I can i get a metric about that.
-- Jet ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Packet loss Cesar Sanabria Pineda (Nov 27)
- Re: Packet loss Jet (Nov 27)
- RE: Packet loss Michael Steele (Nov 27)
- RE: Packet loss Frank Reid (Nov 27)
- RE: Packet loss Arek Majer (Nov 28)
- Re: Packet loss James Riden (Nov 28)
- RE: Packet loss Michael Steele (Nov 28)
- RE: Packet loss Matt Kettler (Nov 29)
- RE: Packet loss Frank Reid (Nov 27)
- RE: Packet loss Rich Adamson (Nov 28)
- RE: Packet loss CJ Ondeck (Nov 28)
- <Possible follow-ups>
- RE: Packet loss Esler, Joel - Contractor (Nov 27)
- Re: Packet loss Donofrio, Lewis (Nov 28)