Snort mailing list archives

Crazy snort packet stats


From: "Billy Marshall" <Billy.Marshall () state co us>
Date: Thu, 03 Sep 2009 09:17:57 -0600

Hi All,
Check this out please. It seems a bit weird
 
Sep  3 09:07:55 xxxx snort[24051]:    Packet Wire Totals:
Sep  3 09:07:55 xxxx snort[24051]:    Received:   2080299423
Sep  3 09:07:55 xxxx snort[24051]:    Analyzed:   6254554910 (300.656%)
Sep  3 09:07:55 xxxx snort[24051]:    Dropped:    120711785 (5.803%)
Sep  3 09:07:55 xxxx snort[24051]:    Outstanding: 18446744069414584344 (886735047150.690%)
 
xxxx:/etc/snort # snort -V
 
   ,,_     -*> Snort! <*-
  o"  )~   Version 2.8.4.1 (Build 38)  i386
   ''''    By Martin Roesch & The Snort Team: http://www.snort.org/team.html 
           Copyright (C) 1998-2009 Sourcefire, Inc., et al.
           Using PCRE version: 6.4 05-Sep-2005
I am not sure what's going on with this. But, the outstanding packets are at a ridiculous percentage and the analyzed 
packets are 3 times what has been received.
 
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: