[Bro] High drop rates on recent builds

[Donaldson, John]

On recent builds from the master branch, I'm seeing anomalously high drop rates.

>From notice.log
458745 packets dropped after filtering, 747736 received, 288991 on link
262140 packets dropped after filtering, 581026 received, 318886 on link
524280 packets dropped after filtering, 826789 received, 302509 on link

If I flip some of these values around to make sense (so that dropped+received=onlink), I'm still left with really bad capture rates. I'm running on DAG cards, and I can confirm that they, too, think that I'm madly dropping packets on the floor, even though CPU utilization for the Bro processes is hovering around 3%.

By reverting back to the 2.3.1 tag, these problems go away.

Any thoughts? Is anyone else seeing this?

v/r

John Donaldson