[Bro] dropped packets
Robin Sommer
robin at icir.org
Wed Mar 5 16:00:36 PST 2014
On Tue, Mar 04, 2014 at 14:11 -0500, sangdrax8 wrote:
> When it is happening a lot, they are 5 minutes apart, but sometimes it
> is 10 minutes, or 25. Always an increment of 5 minutes though.
That's interesting, that could indicate a timer in Bro triggering
something.
A guess: are you loading misc/scan? If so, see if it changes if you
remove that. (If you're using the standard local.bro, it's activated
in there.)
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org/robin
More information about the Bro
mailing list