[Bro] Debian pkg and packet loss metrics

Robin Sommer robin at icir.org
Fri May 13 16:19:48 PDT 2011


On Fri, May 13, 2011 at 13:33 -0400, you wrote:

> 2. How are people non-intrusively measuring packet loss in their
> clusters?

Take a look at policy/capture-loss.bro. That count ACKs for sequence
numbers above a gap, which gives quite a good indicator of loss.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list