Snort mailing list archives
Re: snort packet loss rate
From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 25 Apr 2006 17:14:52 -0400
Jin Fang wrote:
What kind of NIC are you using?HP NC7781 Gigabit adapterIf you fire up tcpdump, does it loose packets too, or just snort?Yes. Half was received by filter and half was dropped by kernel.
Sounds like the problem is not snort-specific. How much bandwidth is on that adapter? Is it really a gigabit connection, or is it feeding a lower-speed line? Is the card on a PCI bus, or something faster such as PCI-X or PCI-E? It's fairly difficult for a pcap app to keep up with bursts of gigabit data. Heck, it's even difficult for the plain PCI bus to keep up with gigabit for a sustained period. ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort packet loss rate Jin Fang (Apr 25)
- Re: snort packet loss rate Matt Kettler (Apr 25)
- Re: snort packet loss rate Jin Fang (Apr 25)
- Re: snort packet loss rate Matt Kettler (Apr 25)
- Re: snort packet loss rate Jin Fang (Apr 26)
- Re: snort packet loss rate Matt Kettler (Apr 26)
- Re: snort packet loss rate Gulfie (Apr 26)
- Re: snort packet loss rate Jin Fang (Apr 25)
- Re: snort packet loss rate Matt Kettler (Apr 25)
- Re: snort packet loss rate Jin Fang (Apr 26)
- Re: snort packet loss rate Justin Heath (May 10)
- Re: snort packet loss rate Jin Fang (Apr 26)
- Re: snort packet loss rate Justin Heath (May 10)
- Comparison of freebsd and linux [was: snort packet loss rate} Jin Fang (Apr 27)
- Re: Comparison of freebsd and linux [was: snort packet loss rate} Jin Fang (Apr 27)