[Bro] Re : Fwd: Big Packet loss and PacketFilter::Dropped_Packets

[Craig Pluchinsky]

Might want to take a look at this. 
https://www.bro.org/documentation/faq.html#how-can-i-reduce-the-amount-of-captureloss-or-dropped-packets-notices 
We had issues with dropped packets until I disabled offloading...etc on 
the monitoring nic.


-------------------------------
Craig Pluchinsky
IT Services
Indiana University of Pennsylvania
724-357-3327


On Mon, 4 Dec 2017, Vikram Basu wrote:

> 
> I am using the basic PF_Ring edition to monitor the interfaces. Is that what is causing the issues ? What kind of throughput can the
> basic PF_Ring (non ZC) handle ? If I am looking at network traffic above 100 mbps will I definitely need the PF_Ring ZC edition ?
> 
>  
> 
> Regards,
> 
> Vikram Basu
> Seceon Inc.
> 
>  
> 
> 
>