[Snort-users] Wacky perfmonitor numbers

Jeremy Hewlett jh at ...950...
Tue May 24 13:21:42 EDT 2005


On Tue, May 24, Gary Richardson wrote:
> That being said, I don't expect perfmonitor to dump out numbers like this:
> 
> Snort Realtime Performance  : Fri May 20 11:04:38 2005
> --------------------------
> Pkts Recv:   177339
> Pkts Drop:   18446744073709550519
> % Dropped:   10401966896006828.00%

You'd get these sort of results when the type of drop statics aren't
what perfmonitor is expecting. By default, this is set to
"accumulate."

> preprocessor perfmonitor: time 300 file /var/log/snort/snort.stats
> pktcnt 10000 console

Add "reset" to this line and let me know if that fixes your problem.





More information about the Snort-users mailing list