[Bro] Question about capture loss script vs. broctl netstats

Derek Banks itsecderek at gmail.com
Tue Jun 25 13:51:43 PDT 2013


It is from a span fed into a Netoptics  port regenerator that feeds a few
devices.  One of those is another Red Hat box with an Endace card in it.
That box (and another device we have) do not seem to be dropping traffic.

-Derek
On Jun 25, 2013 4:13 PM, "Seth Hall" <seth at icir.org> wrote:

>
> On Jun 25, 2013, at 1:50 PM, Derek Banks <itsecderek at gmail.com> wrote:
>
> > So my question is, am I dropping packets or am I good to go?
>
> How are you tapping your traffic?
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro.org/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130625/ab4b31ea/attachment.html 


More information about the Bro mailing list