Snort mailing list archives

snort drop rate


From: "cbit ian" <cbitian () lycos com>
Date: Sat, 15 Nov 2003 00:59:44 -0600

hi! , 
I am trying to find the drop rate for snort. Here is how I am trying to do it. 
I captured the network traffic(about 10000 pkts)  in tcpdump format using snort pkt logging mode. i am sending this 
file from one linux box (using tcp replay ) to other box running snort to analyze 100000 pkts(./snort -A fast -L 
snort.log -h 192........ -c /etc/snort.conf -n 100000). i started sending the tcpdump format file to snort at speeds 
from 10 mbps to 90 mbps.  snort analyzes the 100000 pkts pretty quick and exits....no pkts are dropped....i tried to 
analyze 1 million pkts , but when i run tcpreplay the box running snort freezes.....
can anybody tell me how to find the drop rate...both my boxes hav redhat 6.1 on them... 
srikanth


____________________________________________________________
Enter now for a chance to win a 42" Plasma Television!
http://ad.doubleclick.net/clk;6413623;3807821;f?http://mocda1.com/1/c/563632/113422/313631/313631
AOL users go here: http://ad.doubleclick.net/clk;6413623;3807821;f?http://mocda1.com/1/c/563632/113422/313631/313631
This offer applies to U.S. Residents Only


-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: