Snort mailing list archives
Re: Snort Stats Output - Dropping 300%+ of Packets?
From: Eoin Miller <eoin.miller () trojanedbinaries com>
Date: Thu, 09 Sep 2010 18:22:29 +0000
On 9/9/2010 5:57 PM, JJC wrote:
You are looking at Drop Rate not actual Drop Percentage... You are actually losing 9.909%
Hmm, well the comments inside of src/preprocessors/perf-base.c seem to be a little misleading? ---SNIP-- /* * * Log Base Per Stats to File for Use by the MC * * unixtime(in secs since epoch) * %pkts dropped * mbits/sec (wire) * alerts/sec ---SNIP--- Also I don't think any of this is in the users manual for some reason, I think that would be a great addition. Pig Doktah looks pretty cool, I'll definitely be playing with it. Thanks! --- Eoin ------------------------------------------------------------------------------ This SF.net Dev2Dev email is sponsored by: Show off your parallel programming skills. Enter the Intel(R) Threading Challenge 2010. http://p.sf.net/sfu/intel-thread-sfd _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort Stats Output - Dropping 300%+ of Packets? Eoin Miller (Sep 09)
- Re: Snort Stats Output - Dropping 300%+ of Packets? JJC (Sep 09)
- Re: Snort Stats Output - Dropping 300%+ of Packets? Eoin Miller (Sep 09)
- Re: Snort Stats Output - Dropping 300%+ of Packets? JJC (Sep 09)