[Oisf-users] Issues with Application Layer Filtering

[Cooper F. Nelson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

What is the output of 'ethtool -k' for your capture interface?

What are your sysctl settings for these variables?

net.core.netdev_max_backlog
net.core.rmem_default
net.core.rmem_max

On 6/6/2014 1:14 PM, Jason Batchelor wrote:
> 
> I hit reliably both on the wire and on a pcap. This is why I feel there
> has to be some issue with application layer processing. I am somewhat
> perplexed by this and seek any guidance those with more experience may
> be able to give. Thanks in advance!
> 

- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTkiJ9AAoJEKIFRYQsa8FWdOgH/1dOj5yLjXsMF0AugkweRL/y
tuFcJBnl8i9yrQHxG/zgl8SKroIL5Vbl9gBAbwqleJuyOTo9Dw4fE9Uj1p2cOt2w
Iss0VXgTIURmJvOUQD/KB6Dmih/3XgPeCr+M4aRPXoVdjMpV+MYkH0cJE2ES4hjy
cH1ecvGqAPwHGsbGOKr/ij9RbG1UdffK8P34SYnZg/w3QARaEa+k8lGQwVEdwbRt
Lbu8+Izi24yCd8SNAAqqQMuO0lWoRTRjO5j0HAagD4PenlAHG3kGcjz8L+Dva+ng
T4YiCZRyWwg70lDTkojCYuUOTZ6WTP1pTbJcHunbZtO0W8n3zQuWhDWPsCLpx7E=
=MDfe
-----END PGP SIGNATURE-----