[Oisf-users] tcp.segment_memcap_drop

[Victor Julien]

On 06/09/2014 04:50 PM, Kurzawa, Kevin wrote:
> Regarding the statistic tcp.segment_memcap_drop
> 
>  
> 
> What is this statistic compared to?
> 
> tcp.ssn_memcap_drop is compared to tcp.sessions
> 
> capture.kernel_drops is compared to capture.kernel_packets
> 
> But what is tcp.segment_memcap_drop compared to?

It relates to tcp.reassembly_memuse. If the tcp.segment_memcap_drop
counter is increased, it means that the stream engine is out of
reassembly memory.

>  
> 
> What should this drop rate be? Under 1% like the capture.kernel_drops?

Ideally it's 0.

> tcp.reassembly_memuse            | Detect                    |
> 18446744073420130184

This value looks like a bug here. What suri version are you running?

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------