[Oisf-users] Clarification on dropped packet counters

[Victor Julien]

On 08/10/2011 10:31 PM, Fernando Ortiz wrote:
> Thank you both for the answers. There is an option in suricata.yaml
> "checksum_validation: yes #Validate packet checksum, reject packets with
> invalid checksums."
> 
> Are Wrong checksums packets dropped and registered by
> (ReceivePcapThreadExitStats)or (ReceiveNFQThreadExitStats)?

No. The stats displayed there are from what libpcap reports to us. The
checksum drops inside suricata are separate from that.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------