[Bro] Question about capture loss script vs. broctl netstats
Seth Hall
seth at icir.org
Thu Jun 27 11:17:10 PDT 2013
On Jun 27, 2013, at 9:09 AM, Vern Paxson <vern at icir.org> wrote:
> (Also, some kernels have bugs in how these
> statistics are captured, for example missing out on packets dropped by
> the NIC rather than the kernel.)
Since you're using a DAG card this could depend on what sort of flow splitting configuration you have in place there too.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the Bro
mailing list