[Oisf-users] Packets stucked in Nfqueue when running inline

[Victor Julien]

On 06/21/2011 10:08 AM, Eric Leblond wrote:
>> Another question, is it normal those 425 dropped packets? Right now
>> Suricata is receiving 10Mbps in average, I think less. But in the
>> future they want me to install one that support more than 700 Mbps.
>> But I am a little worry about those dropped packets and of course, the
>> "stucked" ones.
> 
> If packet are blocked, this is because Suricata has decided to block it.
> If I remember correctly this can be due to bad checksum or things like
> that.

Correct. Especially the stream engine can drop bad packets.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------