[Oisf-users] tcp.segment_memcap_drop
Victor Julien
lists at inliniac.net
Tue Jun 10 08:38:49 UTC 2014
On 06/09/2014 04:50 PM, Kurzawa, Kevin wrote:
> Regarding the statistic tcp.segment_memcap_drop
>
>
>
> What is this statistic compared to?
>
> tcp.ssn_memcap_drop is compared to tcp.sessions
>
> capture.kernel_drops is compared to capture.kernel_packets
>
> But what is tcp.segment_memcap_drop compared to?
It relates to tcp.reassembly_memuse. If the tcp.segment_memcap_drop
counter is increased, it means that the stream engine is out of
reassembly memory.
>
>
> What should this drop rate be? Under 1% like the capture.kernel_drops?
Ideally it's 0.
> tcp.reassembly_memuse | Detect |
> 18446744073420130184
This value looks like a bug here. What suri version are you running?
--
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------
More information about the Oisf-users
mailing list