[Bro] using Bro as traffic analyzer.

James Swaro james.swaro at gmail.com
Sun Dec 4 22:54:06 PST 2011


>
>  At the same time, roughly packet loss rate (vs different timescales)
> should be calculated
> by tcp retransmission rate.
>

Are you interested in the packet loss rate for the three-way handshake
only, or for all retransmissions in each connection?

What level of detail are you looking for? (IE. Just that the segment was
retransmitted or perhaps more specific data about how it was retransmitted
such as in response to a retransmission timeout or other recovery method?)

-- 
*- *James Swaro*
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20111205/d208be96/attachment.html 


More information about the Bro mailing list