Re: Packet loss

[Jet <yenjet () gmail com>]

I believe the loss packet rate is reported from PCAP library, not by Snort.
And it depend on the OS and libpcap version.

winpcap = So it reports correct.
Libpcap (Linux) = Pls upgrade to version 0.7.2 or above.
Using any version older than this will always have 0% loss packet reported.

On Fri, 26 Nov 2004 09:05:43 -0600, Cesar Sanabria Pineda
<csanab () ife org mx> wrote:
> Is there a way to know how many packets snort is loosing?. I mean i
> suppouse that while snort is processing a packet it's possible that some
> packets pass without been catched and analized by snort. I can i get a
> metric about that.

--
Jet


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users