[Bro] Bro 2.0 packets dropped

[sridhar basam]

On Thu, Feb 9, 2012 at 8:55 AM, Seth Hall <seth at icir.org> wrote:
>
> On Feb 9, 2012, at 2:41 AM, Machiel van Veen wrote:
>
>> There have been no alerts regarding packet loss either. Thanks for you support
>> on this issue, back to clustering for me ;)
>
>
> Great to hear!  Broadcom nics have the weirdest problems.
>
> Are you doing network based clustering (multiple physical hosts)?

Not exactly related to Machiel problem but if people are stuck with
Broadcom adapters. You can try updating the firmware on the cards. The
version above 4.x is extremely old.
http://www.broadcom.com/support/ethernet_nic/netxtremeii.php for
getting software for your netextreme-ii adapters.

You can also increase the ring buffer from the default 255 to 1024 or
more so that your receive ring isn't overflowing. "/sbin/ethtool -G
eth0 rx 1024"
The same would apply for intel adapters too, if you notice your
interface card dropping packets.

      sridhar