Snort mailing list archives
Perfmonitor / BPF Question
From: "Rob Sharp" <robertsharp () gmail com>
Date: Wed, 16 Jan 2008 10:03:58 -0500
I have a sensor deployed with a BPF file to filter out our network vulnerability scanners to keep the noise down. I notice when the scanner makes a sweep that the dropped packets increase quite a bit. My question is does the perfmonitor count packets dropped by the BPF in the stats it tracks? That would explain the jumps in packet loss. -- Robert Sharp robertsharp () gmail com
------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Perfmonitor / BPF Question Rob Sharp (Jan 16)
- Re: Perfmonitor / BPF Question Martin Roesch (Jan 16)