USR1 Output and BPF traffic

[Dennis Neil <djneil () umich edu>]

Hello,

I was wondering if when filtering traffic using the -F <bpf-file> switch
how this affects stats dumped through the kill -USR1 command. Is the total
number of received and analyzed packets listed the number before the BPF is
applied or after? I'm running a filter to capture "non-internal" sources
and find the total number of packets received and analyzed to be high if it
is post BPF. I notice a "filtered" category but this consistently registers
zero.

If it does not record the numbers after applying the BPF does anyone know
of a way to report on the number of packets received and analyzed by an
applied BPF? Thanks!

Dennis

------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!