Snort mailing list archives
sensor drops packets ?
From: "Juan Fernandez" <Juan.Fernandez () deltathree com>
Date: Sun, 15 May 2005 14:36:38 +0300
Hi, One of my senosers which is located in the dmz an listens to the treffoc there seems to not capturing all the data. I use AAnval to see the alerts and there I noticed that I see just packets that the source ip is my network. ( this is a loaded dmaz with many web servers. so I worked on this sensor with tcpdump and there I saw in the last line that: 26152 packets received by filter 23806 packets dropped by kernel why is that ? the nic operates an 100 mb full duplex... thanks ! juan ------------------------------------------------------- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_ids93&alloc_id281&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- sensor drops packets ? Juan Fernandez (May 15)
- Re: sensor drops packets ? Matt Kettler (May 16)