[Bro] Netmap plugin issue

Seth Hall seth at icir.org
Tue Feb 14 08:37:17 PST 2017

> On Feb 13, 2017, at 10:07 AM, Dave Crawford <bro at pingtrip.com> wrote:
> Continuing to see impressive performance with Bro+Netmap:
> data_forward_rate_Mbps":1484.1698"
> data_drop_rate_Mbps":0.0000"
> And of the 10 workers, the greatest capture_loss reported by Bro is well under 1%:

Yay, that's great!  At least now you can feel more certain that the capture loss is either misreported or you have a SPAN port or packet broker that is having trouble.  You could also check the interface hardware counters here and there to see if you are having any loss on the NIC. (ethtool -S)


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list