[Snort-users] 'kill snort-pid -USR1' returns unrealistic figures

Chris Green cmg at ...671...
Wed Feb 13 06:32:21 EST 2002


Bruno Vuillemin <Bruno.Vuillemin at ...4964...> writes:

> Feb 11 17:03:48 snortBox snort: Snort analyzed -119209984 out of 16777216 packets, 
> Feb 11 17:03:48 snortBox snort: dropping 135987200(810.547%) packets  
> (...)
>
> These figures are impressive but don't seem very reliable.
>
[snip]
>
> Nothing special about snort binaries: I read the docs, compiled it
> as recommended (unless

Linux Kernel version? Pcap version?

> I missed something). snort 1.8.2.

do you see the same with
http://www.snort.org/downloads/snort-stable-snapshot.tar.gz
?
-- 
Chris Green <cmg at ...671...>
"Yeah, but you're taking the universe out of context."




More information about the Snort-users mailing list