Snort mailing list archives
Snort behaviour graphic.
From: Emilio Mira <emial () alumni uv es>
Date: Wed, 10 Jul 2002 14:09:02 +0200 (CEST)
Hi all, I've been doing tests with Snort and I got the graphic attached. We can see traffic received in packets per second with blue line, Snort droped pps with green line and Snort total VM size in kilobytes. X axe represents time in hours (a little more than one week). First, why droped packets are so different in between days with similar traffic? (I get droped packets with a script that compares received packets from the interface with Snort processed packets, from kill -USR1). Second, why Snort vsize is like this?. I thought it bears relation to traffic received, but it doesn't. Thanks. -- Emilio Mira
Current thread:
- Snort behaviour graphic. Emilio Mira (Jul 10)
- RE: Snort behaviour graphic. Ashley Thomas (Jul 10)
- RE: Snort behaviour graphic. Ashley Thomas (Jul 10)
- Re: Snort behaviour graphic. Chris Green (Jul 10)
- Re: Snort behaviour graphic. Emilio Mira (Jul 10)
- Re: Snort behaviour graphic. Chris Green (Jul 10)
- Re: Snort behaviour graphic. Emilio Mira (Jul 10)
- <Possible follow-ups>
- RE: Snort behaviour graphic. Emilio Mira Alfaro (Jul 10)