Snort mailing list archives
Re: snort packet loss rate
From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 25 Apr 2006 16:19:25 -0400
Jin Fang wrote:
I have deployed snort in a gigabyte interface. I noticed that the packet loss rate is quite high, over 80%. Even after I disabled all preprocessors, loading no rules, still the loss rate is about 15%. Also the kernel has been compiled with device_polling option and this freebsd box has 4GB memory. What is now the factor to affect this loss rate?
What kind of NIC are you using? If you fire up tcpdump, does it loose packets too, or just snort? ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort packet loss rate Jin Fang (Apr 25)
- Re: snort packet loss rate Matt Kettler (Apr 25)
- Re: snort packet loss rate Jin Fang (Apr 25)
- Re: snort packet loss rate Matt Kettler (Apr 25)
- Re: snort packet loss rate Jin Fang (Apr 26)
- Re: snort packet loss rate Matt Kettler (Apr 26)
- Re: snort packet loss rate Gulfie (Apr 26)
- Re: snort packet loss rate Jin Fang (Apr 25)
- Re: snort packet loss rate Matt Kettler (Apr 25)
- Re: snort packet loss rate Jin Fang (Apr 26)
- Re: snort packet loss rate Justin Heath (May 10)
- Re: snort packet loss rate Jin Fang (Apr 26)
- Re: snort packet loss rate Justin Heath (May 10)