[Bro] Question about capture loss script vs. broctl netstats

Seth Hall seth at icir.org
Thu Jun 27 11:17:10 PDT 2013


On Jun 27, 2013, at 9:09 AM, Vern Paxson <vern at icir.org> wrote:

>  (Also, some kernels have bugs in how these
> statistics are captured, for example missing out on packets dropped by
> the NIC rather than the kernel.)


Since you're using a DAG card this could depend on what sort of flow splitting configuration you have in place there too.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/





More information about the Bro mailing list