Re: Snort stats!

[Todd Wease <twease () sourcefire com>]

The 'OTHER' count tells you the number of times Snort came across a 
protocol it doesn't know about or support.

Zakai Kinan wrote:
> I have the following:
>
> Packet Breakdown by Protocol:
>
>     TCP:      95961 (82.026%)
>     UDP:       1041 (0.890%)
>    ICMP:        314 (0.268%)
>     ARP:        218 (0.186%)
>   EAPOL:          0 (0.000%)
>    IPv6:          0 (0.000%)
> ETHLOOP:        325 (0.278%)
>     IPX:          0 (0.000%)
>    FRAG:          0 (0.000%)
>   OTHER:      19130 (16.352%)
> DISCARD:          0 (0.000%)
>
>
> What does OTHER mean here?
>
> TIA,
>
> ZK
>
>
>       ____________________________________________________________________________________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users