[Oisf-users] Percentage of dropped packets

[Peter Bates]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello again all

Date: 5/30/2012 -- 11:31:44 (uptime: 0d, 00h 05m 38s)
tcp.invalid_checksum      | AFPacketeth61             | 262
tcp.reassembly_gap        | AFPacketeth61             | 1502
Date: 5/30/2012 -- 11:32:05 (uptime: 0d, 00h 05m 59s)
tcp.invalid_checksum      | AFPacketeth61             | 272
tcp.reassembly_gap        | AFPacketeth61             | 1600
Date: 5/30/2012 -- 11:32:33 (uptime: 0d, 00h 06m 27s)
tcp.invalid_checksum      | AFPacketeth61             | 294
tcp.reassembly_gap        | AFPacketeth61             | 1738

[27083] 30/5/2012 -- 11:26:10 - (tm-threads.c:1858) <Info>
(TmThreadWaitOnThreadInit) -- all 1 packet processing threads, 3
management threads initialized, engine started.
[27083] 30/5/2012 -- 11:36:42 - (suricata.c:1781) <Info> (main) --
stopping engine, waiting for outstanding packets
[27083] 30/5/2012 -- 11:36:42 - (suricata.c:1816) <Info> (main) -- all
packets processed by threads, stopping engine
[27086] 30/5/2012 -- 11:36:42 - (flow-manager.c:542) <Info>
(FlowManagerThread) -- 0 new flows, 0 established flows were timed
out, 0 flows in closed state
[27083] 30/5/2012 -- 11:36:44 - (suricata.c:1845) <Info> (main) --
time elapsed 633.755s
[27085] 30/5/2012 -- 11:36:44 - (source-af-packet.c:965) <Info>
(ReceiveAFPThreadExitStats) -- (AFPacketeth61) Kernel: Packets
141765482, dropped 114700625

Would kernel 3.x and FANOUT with AF_PACKET help here?

I'm just considering my options before I dive in with PF_RING because
I was trying to keep things simple.

- -- 
Peter Bates
Senior Computer Security Officer    Phone: +44(0)2076792049
Information Services Division	    Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPxfkOAAoJELhVoVpEMS6RdGQH/jpjC9sxFjHIRmC3z5iHFoGE
RoJVFDSFcQ3Uf4ezc5J3SSVe/HEZP6bw2qAbaMBc9VpGRVlzA+5HDRaYCTtkZq0T
TqCSaS/yQgO9/YiYWnOLby+qBbw77lqBeNFjC810HK/unqqPN+jk0L/9+Ew/99IR
JhQ4xqwQxa1bwCInyWFMX1ZYiuFJj8mhUtxzKrMhynJA+GS9qUo7JgriW4iP4nfH
Uc8irDlb2o7zLnhufFT29Qbrcd8twNjJKJru4maxNyL9MILDWqKA5yK9bdRwuL4X
8hqpWwjzpmZbfWRMX6tM5Uj3QoPb5AXZY97+iyqqYD4wQV8g3OeiZcI2Wl0K7hE=
=dnR1
-----END PGP SIGNATURE-----