[Oisf-users] Just what does "capture.kernel_drops" count?

Russell Fulton r.fulton at auckland.ac.nz
Tue Aug 19 01:12:59 UTC 2014


I am using pfring and suri together and I am seeing significant number (~50%) of capture.kernel_drops at peak times.

capture.kernel_packets    | RxPFReth31                | 2404928581
capture.kernel_drops      | RxPFReth31                | 1434169109

*stats over 10 minutes)

according to our cpacket switch interface is seeing about 2.5Gbps and 360K pps.

This sensor is also running bro which I may well have to drop.


More information about the Oisf-users mailing list