[Oisf-devel] tcp.ssn_memcap_drop

Martin Holste mcholste at gmail.com
Sun Oct 2 19:27:48 UTC 2011


Actually, I don't get any stream drops anymore, even with settings of
2 gig or so for the stream buffers.

On Sat, Oct 1, 2011 at 8:22 PM, Victor Julien <victor at inliniac.net> wrote:
> On 09/19/2011 04:37 PM, Martin Holste wrote:
>> I'm seeing a ton of tcp.ssn_memcap_drop in my stats.log.  Which memcap
>> do I need to tweak to decrease these drops?  I've already set them all
>> to 4GB.
>
> I converted all memcaps (flow, stream ssn, stream segment) to be 64 bit.
> You might try setting it even higher :)
>
> --
> ---------------------------------------------
> Victor Julien
> http://www.inliniac.net/
> PGP: http://www.inliniac.net/victorjulien.asc
> ---------------------------------------------
>
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>



More information about the Oisf-devel mailing list