Snort dropping packets.

[Emilio Mira <emial () alumni uv es>]

Hi all,

I'm meassuring Snort dropped packets with 'kill -USR1 <pid>' and aparently
Snort is working without drops. But if I get received packets by the
interface from /proc/net/dev and processed packets from Snort with 'kill
-USR1 <pid>', there are diferences (see JPG attached).

Why doesn't USR1 work?. 

I'm using Snort 1.8.7 with default configuration and libpcap 0.7.1.

Thanks.

--
Emilio Mira