[Snort-users] Snort stats!

Todd Wease twease at ...1935...
Tue Jan 22 13:52:26 EST 2008


The 'OTHER' count tells you the number of times Snort came across a 
protocol it doesn't know about or support.

Zakai Kinan wrote:
> I have the following:
> 
> Packet Breakdown by Protocol:
> 
>     TCP:      95961 (82.026%)
>     UDP:       1041 (0.890%)
>    ICMP:        314 (0.268%)
>     ARP:        218 (0.186%)
>   EAPOL:          0 (0.000%)
>    IPv6:          0 (0.000%)
> ETHLOOP:        325 (0.278%)
>     IPX:          0 (0.000%)
>    FRAG:          0 (0.000%)
>   OTHER:      19130 (16.352%)
> DISCARD:          0 (0.000%)
> 
> 
> What does OTHER mean here?
> 
> TIA,
> 
> ZK
> 
> 
>       ____________________________________________________________________________________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list