[Bro] Netmap plugin issue

Dave Crawford bro at pingtrip.com
Tue Feb 14 10:10:44 PST 2017


> 
> Yay, that's great!  At least now you can feel more certain that the capture loss is either misreported or you have a SPAN port or packet broker that is having trouble.  You could also check the interface hardware counters here and there to see if you are having any loss on the NIC. (ethtool -S)
> 
>  .Seth
> 

Seth, so are you thinking that LB is mis-reporting packet loss? This is the ethtool stats for the capture NIC:

NIC statistics:
     rx_packets: 55681830
     tx_packets: 0
     rx_bytes: 35600025423
     tx_bytes: 0
     rx_errors: 0
     tx_errors: 0
     rx_dropped: 0
     tx_dropped: 0
     multicast: 43367780
     collisions: 0
     rx_over_errors: 0
     rx_crc_errors: 0
     rx_frame_errors: 0
     rx_fifo_errors: 0
     rx_missed_errors: 193958
     tx_aborted_errors: 0
     tx_carrier_errors: 0
     tx_fifo_errors: 0
     tx_heartbeat_errors: 0
     rx_pkts_nic: 18460871971
     tx_pkts_nic: 0
     rx_bytes_nic: 10234659126400
     tx_bytes_nic: 0
     lsc_int: 9
     tx_busy: 0
     non_eop_descs: 0
     broadcast: 277894
     rx_no_buffer_count: 0
     tx_timeout_count: 0
     tx_restart_queue: 0
     rx_long_length_errors: 0
     rx_short_length_errors: 0
     tx_flow_control_xon: 0
     rx_flow_control_xon: 0
     tx_flow_control_xoff: 0
     rx_flow_control_xoff: 0
     rx_csum_offload_errors: 0


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170214/b7ff4a74/attachment.html 


More information about the Bro mailing list