Snort mailing list archives

afpacket DAQ - large "Outstanding" number/percent


From: Jason Wallace <jason.r.wallace () gmail com>
Date: Wed, 13 Oct 2010 15:11:44 -0400

Is anyone else seeing a strange "Outstanding" number/percent after
exiting when using afpacket in passive mode? It only seems to occur in
daemon mode (-D).


Oct 13 15:05:46  snort[1331]: Can't acquire (-1) -
afpacket_daq_acquire: Poll failed: Interrupted system call!
Oct 13 15:05:47 snort[1331]:
===============================================================================
Oct 13 15:05:47 snort[1331]: Packet I/O Totals:
Oct 13 15:05:47 snort[1331]:    Received:       650083
Oct 13 15:05:47 snort[1331]:    Analyzed:        24754 (  3.808%)
Oct 13 15:05:47 snort[1331]:     Dropped:            0 (  0.000%)
Oct 13 15:05:47 snort[1331]:    Filtered:       625332 ( 96.193%)
Oct 13 15:05:47 snort[1331]: Outstanding: 18446744073709551613
(2837598287250944.000%)
Oct 13 15:05:47 snort[1331]:    Injected:            0
Oct 13 15:05:47 snort[1331]:
===============================================================================


snort # snort -V

   ,,_     -*> Snort! <*-
  o"  )~   Version 2.9.0 (Build 68)
   ''''    By Martin Roesch & The Snort Team:
http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2010 Sourcefire, Inc., et al.
           Using libpcap version 1.0.0
           Using PCRE version: 7.9 2009-04-11
           Using ZLIB version: 1.2.3


thx,
Wally

------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: