[Oisf-users] Questions about stats and packet drops

[Victor Julien]

On 01/07/2015 05:14 PM, Jose Vila wrote:
> I'm using PF_RING and getting this values for tcp.reassembly_memuse
> right now:
> tcp.reassembly_memuse     | RxPFRbond01               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond02               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond03               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond04               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond05               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond06               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond07               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond08               | 18446744073431298171
> tcp.reassembly_memuse     | RxPFRbond09               | 18446744073431298171

Could be related to:
https://redmine.openinfosecfoundation.org/issues/1178
https://redmine.openinfosecfoundation.org/issues/632

Although, you'd need a lot of memory use to overflow a 64bit counter. So
perhaps something else is happening as well.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------