[Snort-devel] Misleading count of packet drops
elof at ...969...
Tue Apr 13 03:09:17 EDT 2004
My snort statistics always show a few hundred dropped packets. This
doesn't look good in reports shipped to customers, especially since the
number is misleading.
I've found out that all the drops happen during snort startup and
initialization. When snort is up and running I have no packet drops.
Couldn't you start counting packet drops after snort has finished
Couldn't you add a function to reset all the counters while running?
More information about the Snort-devel