[Bro] Netmap plugin issue

Seth Hall seth at icir.org
Sat Feb 11 18:12:04 PST 2017


> On Feb 10, 2017, at 11:24 PM, Dave Crawford <bro at pingtrip.com> wrote:
> 
> {"ts":1486786393.408004,"interface":"netmap:eth6","packets_received":3816916,"packets_forwarded":2495606,"packets_dropped":1213100,"non_ip_packets":2014,"data_forward_rate_Mbps":93.6190,"data_drop_rate_Mbps":0.0000,"packet_forward_rate_kpps":29.4030,"packet_drop_rate_kpps":0.0000,"free_buffer_slots":100000}

What's more interesting for me here is that the packet_drop_rate_kpps is 0.  What could have happened is that the packets were lost because Bro processes hadn't been started yet.  It seems to me from this line is that ~100Mbps of traffic is flowing with no packets being lost.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list