[Snort-devel] Misleading count of packet drops

Martin Olsson elof at ...969...
Tue Apr 13 03:09:17 EDT 2004


Hi guys!

My snort statistics always show a few hundred dropped packets. This
doesn't look good in reports shipped to customers, especially since the
number is misleading.
I've found out that all the drops happen during snort startup and
initialization. When snort is up and running I have no packet drops.


Two questions:

1.
Couldn't you start counting packet drops after snort has finished
initializing?

2.
Couldn't you add a function to reset all the counters while running?

/Martin





More information about the Snort-devel mailing list