Snort mailing list archives

Re: dropped packets in Perfmonitor


From: Joel Esler <jesler () sourcefire com>
Date: Fri, 3 Dec 2010 07:54:36 -0500

Lawrence and I communicated offline. It looks like there may be several issues.

J

On Friday, December 3, 2010, Leon Ward <lward () sourcefire com> wrote:
As a note, Mbps isn't anywhere near the the be-all and end-all of
measuring effort. Take a look at the avg packet size, number of
sessions, protocol mix, fragments, etc.

I would take Joel up on his offer to look at your perfmon output, he
may spot something else related.

-L

On 1 December 2010 18:15, Joel Esler <jesler () sourcefire com> wrote:
Can you show us some results from the perfmon preprocessor?
J

On Wed, Dec 1, 2010 at 12:42 PM, Lawrence R. Hughes, Sr.
<lhughes () safemedia com> wrote:

Hi,

It seems that when our Mbit per second increase, dropped packets decrease
and when Mbit per second decrease we have a higher rate of dropped packets?

Is there something we can tune to keep the dropped packets at 1% or less?


Thanks,
Larry


------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



--
Joel Esler


------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




--
Leon Ward, Senior Security Engineer, Sourcefire.
| phone: +44 118 9898408 | cissp | sfce
| sourcefire.com | snort.org | clamav.net


-- 
Joel Esler

------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: