[Oisf-users] Dropped packets statistics

[Victor Julien]

Benjamin Burns wrote:
> Is there any part of suricata that provides the statistics for how many
> packets were dropped in a session? This would be in IDS mode rather than
> IPS.

When Suricata exits it prints the following stats to the screen:

[3444] 22/9/2010 -- 14:52:06 - (source-pcap.c:437) <Info>
(ReceivePcapThreadExitStats) -- (ReceivePcap) Pcap Total:226 Recv:226
Drop:0 (0.0%).

The "Drop" number is the number of dropped packets.

Is this what you are looking for?

Cheers,
Victor

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------