Snort mailing list archives

MMAP and odd looking stats


From: "John Hally" <JHally () ebscohost com>
Date: Thu, 8 Nov 2007 13:19:36 -0500



Hello all,

I've been playing around with mmap on fedora core6 and things seem to be
working ok, but I noticed that the highlighted % numbers 'Analyzed' and
'Outstanding' are really strange looking.  Any idea if this is a
'problem' or just an anomaly?

Thanks!



Nov  8 12:08:24 sensor snort[9258]: Snort initialization completed
successfully (pid=9258) 
Nov  8 12:08:24 sensor snort[9258]: Using PCAP_FRAMES = 32768 
Nov  8 12:14:53 sensor snort[9258]: *** Caught Term-Signal 
Nov  8 12:14:53 sensor snort[9258]:
========================================================================
======= 
Nov  8 12:14:53 sensor snort[9258]: Packet Wire Totals: 
Nov  8 12:14:53 sensor snort[9258]:    Received:      4718727 
Nov  8 12:14:53 sensor snort[9258]:    Analyzed:      9434571 (199.939%)
Nov  8 12:14:53 sensor snort[9258]:     Dropped:            0 (0.000%) 
Nov  8 12:14:53 sensor snort[9258]: Outstanding: 18446744073704835772
(390926283162913.125%) 
Nov  8 12:14:53 sensor snort[9258]:
========================================================================
=======

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: