Snort mailing list archives

Perfmonitor / BPF Question


From: "Rob Sharp" <robertsharp () gmail com>
Date: Wed, 16 Jan 2008 10:03:58 -0500

I have a sensor deployed with a BPF file to filter out our network
vulnerability scanners to keep the noise down.  I notice when the scanner
makes  a sweep that the dropped packets increase quite a bit.

My question is does the perfmonitor count packets dropped by the BPF in the
stats it tracks?  That would explain the jumps in packet loss.

-- 
Robert Sharp
robertsharp () gmail com
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: