RE: what causes packet drops with low cpu usage

[Garrett.Allen () ser com]

undirected question - i'm curious now - how does one tell that packets are
dropped?   netstat -i e0?  if so which categories are the ones usually
showing the drops (rx-err, rx-drp, rx-ovr)?  even within those categories
wouldn't you need a trace to see if there were defective datagrams, header
issues, etc.  or am i just oscillating 90 degrees out of phase (if so
apologies in advance)?
 
thanks.
 
garrett
 
 
 -----Original Message-----
From: Horta, Benny [mailto:BHorta1 () dadeschools net]
Sent: Friday, June 20, 2003 8:17 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] what causes packet drops with low cpu usage



What would cause snort to drop packets even if the cpu is in the 20-30
percent range? It is about 2%