Re: Snort Dropped Packets

[Y M <snort () outlook com>]

The first half of the answer in below post might answer your question.
http://seclists.org/snort/2014/q3/256

Y
From: w-click () hotmail com
To: snort-users () lists sourceforge net
Date: Wed, 1 Oct 2014 11:56:02 +0000
Subject: [Snort-users] Snort Dropped Packets




Hi, i have question regarding Snort Dropped Packets.
Snort Dropped Packets: is that mean the traffic can not reach to Snort because the buffering on a machine is full and 
then packets dropped, so Snort can not see these traffic? OR the traffic reached to the Snort and then Snort dropped 
some for some reason  (please see the Snort output figure).
The output figure show that Snort revived all packets sent but it is dropped some of them.
Please advice.
Best regards



                                                                                                                        
  

------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!                                        

------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!