Snort mailing list archives

Snort 2.0.4 on OpenBSD 3.4 is dropping packets


From: dlbox () comcast net
Date: Mon, 17 Nov 2003 16:21:52 +0000

Hello,

I was hoping someone could help me out here. I have Snort 2.0.4 installed on a 
new OpenBSD 3.4 system.

Here is my system configuration:
Intel P4 3.06 GHz CPU
1GB RAM
80 GB HD
NetGear GA621 Fiber Ethernet Card (snort monitors this int)
Builtin 10/100 NIC (used for management)

I am using a NetOptics Fiber Tap to monitor traffic.
OpenBSD and Snort work fine, except that I notice that Snort drops packets, 
where the previous installtion of RedHat 9 on the SAME box reported no dropped 
packets. I have tuned Snort (rules, binary logging, etc,) to reduce dropped 
packets, but I am wondering the following:

1. Is it true that Linux 'lies' about how many packets it drops?
2. Should expect to be dropping packets with such a fast box, or maybe I have 
not done some important post-Install fixes on OpenBSD?
3. How can I determine the amount of bandwidth my interface is monitoring?


Thanks in advance,

Joe


-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: