[Bro] Debian pkg and packet loss metrics
Robin Sommer
robin at icir.org
Fri May 13 16:19:48 PDT 2011
On Fri, May 13, 2011 at 13:33 -0400, you wrote:
> 2. How are people non-intrusively measuring packet loss in their
> clusters?
Take a look at policy/capture-loss.bro. That count ACKs for sequence
numbers above a gap, which gives quite a good indicator of loss.
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list