[Oisf-users] Clarification on dropped packet counters

Victor Julien victor at inliniac.net
Mon Aug 22 09:55:09 UTC 2011

On 08/10/2011 10:31 PM, Fernando Ortiz wrote:
> Thank you both for the answers. There is an option in suricata.yaml
> "checksum_validation: yes #Validate packet checksum, reject packets with
> invalid checksums."
> Are Wrong checksums packets dropped and registered by
> (ReceivePcapThreadExitStats)or (ReceiveNFQThreadExitStats)?

No. The stats displayed there are from what libpcap reports to us. The
checksum drops inside suricata are separate from that.

Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-users mailing list