Snort mailing list archives

What are the "other" protocols?


From: "Jones, Benny" <Ben () wcom net>
Date: Tue, 31 Jul 2001 08:34:27 -0400

Sending a SIGUSR1 to the snort process causes it to
write some interesting statistics to the system log
file.  Under the "Breakdown by protocol:" column,
I find that about 4% of my traffic falls under "other".

What is this?  Is there a way (using snort) to log or
view it?

(As an aside, on my Solaris 8 sensor, sending 2 successive
SIGUSR1s to snort will cause the process to abort.)

Thanks in advance.

Benny

Current thread: