Snort mailing list archives
MMAP and odd looking stats
From: "John Hally" <JHally () ebscohost com>
Date: Thu, 8 Nov 2007 13:19:36 -0500
Hello all, I've been playing around with mmap on fedora core6 and things seem to be working ok, but I noticed that the highlighted % numbers 'Analyzed' and 'Outstanding' are really strange looking. Any idea if this is a 'problem' or just an anomaly? Thanks! Nov 8 12:08:24 sensor snort[9258]: Snort initialization completed successfully (pid=9258) Nov 8 12:08:24 sensor snort[9258]: Using PCAP_FRAMES = 32768 Nov 8 12:14:53 sensor snort[9258]: *** Caught Term-Signal Nov 8 12:14:53 sensor snort[9258]: ======================================================================== ======= Nov 8 12:14:53 sensor snort[9258]: Packet Wire Totals: Nov 8 12:14:53 sensor snort[9258]: Received: 4718727 Nov 8 12:14:53 sensor snort[9258]: Analyzed: 9434571 (199.939%) Nov 8 12:14:53 sensor snort[9258]: Dropped: 0 (0.000%) Nov 8 12:14:53 sensor snort[9258]: Outstanding: 18446744073704835772 (390926283162913.125%) Nov 8 12:14:53 sensor snort[9258]: ======================================================================== ======= ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- MMAP and odd looking stats John Hally (Nov 08)
- Re: MMAP and odd looking stats Todd Wease (Nov 08)
- Re: MMAP and odd looking stats Todd Wease (Nov 15)
- Any way to do something like "Flowbits, " but for other than a TCP stream? Bachelor, Stephen A CTR USSOCOM HQ (Nov 15)
- Re: Any way to do something like "Flowbits, " but for other than a TCP stream? M. Shirk (Nov 16)
- Re: MMAP and odd looking stats Todd Wease (Nov 15)
- Re: MMAP and odd looking stats Todd Wease (Nov 08)