[Bro] PF_Ring and Bro - packet loss

nathanael rayborn nathanael.rayborn at gmail.com
Fri Sep 11 11:38:42 PDT 2015


I'm experiencing high packet loss (15% -50%) with Bro 2.4 compiled with
PF_Ring. PFcount (pfcount -i eth0 -e 1) shows 0% packet loss while
/proc/net/pf_ring/PID shows the same number of dropped packets as broctl
netstats. The github link contains all changes and performance steps I've
taken so far along with output from PFcount, broctl, and ethtool. Has
anyone else experienced similar performance issues or have recommendations
to get my dropped packets as close to 0% as possible? Thanks


Current config - https://gist.github.com/nate-ray/8b4d03eab49d11715398
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150911/272ff4ac/attachment.html 


More information about the Bro mailing list