[Oisf-users] Packets stucked in Nfqueue when running inline

Victor Julien victor at inliniac.net
Tue Jun 21 08:17:36 UTC 2011

On 06/21/2011 10:08 AM, Eric Leblond wrote:
>> Another question, is it normal those 425 dropped packets? Right now
>> Suricata is receiving 10Mbps in average, I think less. But in the
>> future they want me to install one that support more than 700 Mbps.
>> But I am a little worry about those dropped packets and of course, the
>> "stucked" ones.
> If packet are blocked, this is because Suricata has decided to block it.
> If I remember correctly this can be due to bad checksum or things like
> that.

Correct. Especially the stream engine can drop bad packets.

Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-users mailing list