[Bro] Question about capture loss script vs. broctl netstats

Seth Hall seth at icir.org
Thu Jun 27 11:17:10 PDT 2013

On Jun 27, 2013, at 9:09 AM, Vern Paxson <vern at icir.org> wrote:

>  (Also, some kernels have bugs in how these
> statistics are captured, for example missing out on packets dropped by
> the NIC rather than the kernel.)

Since you're using a DAG card this could depend on what sort of flow splitting configuration you have in place there too.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list