[Bro] Packet Drops

[Tom OBrion]

yeah I suspect you are correct.   we are at 91mbps atm and bro is
consuming pretty much the 1 CPU.

Thanks for all your help peops.  Time to throw a bigger horse at it!

Tom

On Thu, May 10, 2012 at 9:51 AM, Seth Hall <seth at icir.org> wrote:
>
> On May 10, 2012, at 9:05 AM, Tom OBrion wrote:
>
>> Here is a snipet of the log
>> when we were running close to 100mbps.
>> 1336586727.588158     900.000168      bro     289518  644040  44.953%
>> 1336587627.588220     900.000062      bro     306102  746812  40.988%
>
> Ah, ok.  So you said that it's an old dual Xeon box?  Does that mean you have 2 cores total?
>
> It's very likely that your box is just underpowered if you only have two cores and it's an older cpu architecture.
>
>  .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>