[Oisf-users] 3.2 - Wildly Dropping Packets

Cloherty, Sean E scloherty at mitre.org
Thu Dec 1 19:51:50 UTC 2016


Thankfully this is a test box, but it has been cooking along with a less than 1% drop rate until I upgraded from 3.1.3 to 3.2

------------------------------------------------------------------------------------
Date: 12/1/2016 -- 13:18:53 (uptime: 0d, 04h 29m 24s)
------------------------------------------------------------------------------------
Counter                                    | TM Name                   | Value
------------------------------------------------------------------------------------
capture.kernel_packets                     | Total                     | 2926059934
capture.kernel_drops                       | Total                     | 2471792091
decoder.pkts                               | Total                     | 451535597
decoder.bytes                              | Total                     | 273993787357
decoder.ipv4                               | Total                     | 451533977
decoder.ipv6                               | Total                     | 3194
decoder.ethernet                           | Total                     | 451535597
decoder.tcp                                | Total                     | 340732185
decoder.udp                                | Total                     | 109126355
decoder.sctp                               | Total                     | 5
decoder.icmpv4                             | Total                     | 62733
decoder.icmpv6                             | Total                     | 782
decoder.gre                                | Total                     | 425
decoder.teredo                             | Total                     | 2280
decoder.avg_pkt_size                       | Total                     | 606
decoder.max_pkt_size                       | Total                     | 1514
defrag.ipv4.fragments                      | Total                     | 1495
defrag.ipv4.reassembled                    | Total                     | 626
defrag.ipv6.fragments                      | Total                     | 26
tcp.sessions                               | Total                     | 9529307
tcp.pseudo                                 | Total                     | 358711
tcp.syn                                    | Total                     | 4198604
tcp.synack                                 | Total                     | 2568583
tcp.rst                                    | Total                     | 3300939
tcp.reassembly_gap                         | Total                     | 3687801
detect.alert                               | Total                     | 39
detect.nonmpm_list                         | Total                     | 4
app_layer.flow.http                        | Total                     | 435661
app_layer.tx.http                          | Total                     | 1705795
app_layer.tx.smtp                          | Total                     | 5009
app_layer.flow.tls                         | Total                     | 245724
app_layer.flow.ssh                         | Total                     | 835
app_layer.flow.dcerpc_tcp                  | Total                     | 17
app_layer.flow.dns_tcp                     | Total                     | 49
app_layer.tx.dns_tcp                       | Total                     | 98
app_layer.flow.failed_tcp                  | Total                     | 2754586
app_layer.flow.dcerpc_udp                  | Total                     | 4
app_layer.flow.dns_udp                     | Total                     | 265532
app_layer.tx.dns_udp                       | Total                     | 281469
app_layer.flow.failed_udp                  | Total                     | 2327184
flow_mgr.closed_pruned                     | Total                     | 1628718
flow_mgr.new_pruned                        | Total                     | 3996279
flow_mgr.est_pruned                        | Total                     | 6816703
flow.spare                                 | Total                     | 10278
flow.tcp_reuse                             | Total                     | 204468
flow_mgr.flows_checked                     | Total                     | 14525
flow_mgr.flows_notimeout                   | Total                     | 13455
flow_mgr.flows_timeout                     | Total                     | 1070
flow_mgr.flows_timeout_inuse               | Total                     | 171
flow_mgr.flows_removed                     | Total                     | 899
flow_mgr.rows_checked                      | Total                     | 65536
flow_mgr.rows_skipped                      | Total                     | 62883
flow_mgr.rows_empty                        | Total                     | 3
flow_mgr.rows_busy                         | Total                     | 1
flow_mgr.rows_maxlen                       | Total                     | 15
tcp.memuse                                 | Total                     | 66079224
tcp.reassembly_memuse                      | Total                     | 16619040438
dns.memuse                                 | Total                     | 2244149
http.memuse                                | Total                     | 335827011
flow.memuse                                | Total                     | 94227136
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20161201/f59455a4/attachment-0001.html>


More information about the Oisf-users mailing list