[Bro] Netmap plugin issue

[Seth Hall]

> On Feb 13, 2017, at 10:07 AM, Dave Crawford <bro at pingtrip.com> wrote:
> 
> Continuing to see impressive performance with Bro+Netmap:
> 
> data_forward_rate_Mbps":1484.1698"
> data_drop_rate_Mbps":0.0000"
> 
> And of the 10 workers, the greatest capture_loss reported by Bro is well under 1%:

Yay, that's great!  At least now you can feel more certain that the capture loss is either misreported or you have a SPAN port or packet broker that is having trouble.  You could also check the interface hardware counters here and there to see if you are having any loss on the NIC. (ethtool -S)

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/