[Bro] High drop rates on recent builds
donaldson8 at llnl.gov
Wed Oct 1 11:56:08 PDT 2014
On recent builds from the master branch, I'm seeing anomalously high drop rates.
458745 packets dropped after filtering, 747736 received, 288991 on link
262140 packets dropped after filtering, 581026 received, 318886 on link
524280 packets dropped after filtering, 826789 received, 302509 on link
If I flip some of these values around to make sense (so that dropped+received=onlink), I'm still left with really bad capture rates. I'm running on DAG cards, and I can confirm that they, too, think that I'm madly dropping packets on the floor, even though CPU utilization for the Bro processes is hovering around 3%.
By reverting back to the 2.3.1 tag, these problems go away.
Any thoughts? Is anyone else seeing this?
More information about the Bro