[Snort-users] Snort dropping packets.

Emilio Mira emial at ...4389...
Thu Jul 11 03:11:09 EDT 2002


Hi all,

I'm meassuring Snort dropped packets with 'kill -USR1 <pid>' and aparently
Snort is working without drops. But if I get received packets by the
interface from /proc/net/dev and processed packets from Snort with 'kill
-USR1 <pid>', there are diferences (see JPG attached).

Why doesn't USR1 work?. 

I'm using Snort 1.8.7 with default configuration and libpcap 0.7.1.

Thanks.

--
Emilio Mira
-------------- next part --------------
A non-text attachment was scrubbed...
Name: received_vs_processed.jpg
Type: image/jpeg
Size: 54722 bytes
Desc: Plot
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020711/c20cea35/attachment.jpg>


More information about the Snort-users mailing list