[Oisf-users] tcp.segment_memcap_drop

[Kurzawa, Kevin]

Regarding the statistic tcp.segment_memcap_drop

What is this statistic compared to?
tcp.ssn_memcap_drop is compared to tcp.sessions
capture.kernel_drops is compared to capture.kernel_packets
But what is tcp.segment_memcap_drop compared to?

What should this drop rate be? Under 1% like the capture.kernel_drops?

capture.kernel_packets                | RxPcapbond01              | 1271054711
capture.kernel_drops                    | RxPcapbond01              | 1166011
capture.kernel_ifdrops                 | RxPcapbond01              | 0
tcp.sessions                                       | Detect                    | 65531895
tcp.ssn_memcap_drop                 | Detect                    | 0
tcp.pseudo                                         | Detect                    | 15392402
tcp.invalid_checksum                    | Detect                    | 8260810
tcp.no_flow                                       | Detect                    | 0
tcp.reused_ssn                                 | Detect                    | 21204
tcp.memuse                                      | Detect                    | 59274160
tcp.syn                                                 | Detect                    | 66394888
tcp.synack                                           | Detect                    | 65313573
tcp.rst                                                   | Detect                    | 27152313
tcp.segment_memcap_drop      | Detect                    | 363009373
tcp.stream_depth_reached        | Detect                    | 20661
tcp.reassembly_memuse            | Detect                    | 18446744073420130184
tcp.reassembly_gap                       | Detect                    | 28638389

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20140609/08de0336/attachment-0002.html>