Snort mailing list archives
Question about outstanding packets
From: "C. L. Martinez" <carlopmart () gmail com>
Date: Fri, 13 Feb 2015 07:01:36 +0000
Hi all,
Under my snort's statistics, I see results like these every day:
*** Caught Term-Signal
===============================================================================
Run time for packet processing was 86064.336514 seconds
Snort processed 2731635677 packets.
Snort ran for 0 days 23 hours 54 minutes 24 seconds
Pkts/hr: 118766768
Pkts/min: 1904906
Pkts/sec: 31739
===============================================================================
Packet I/O Totals:
Received: 3097205569
Analyzed: 2731635677 ( 88.197%)
Dropped: 1427584 ( 0.046%)
Filtered: 0 ( 0.000%)
Outstanding: 365569892 ( 11.803%)
Injected: 0
===============================================================================
But I don't see clearly what it means "Outstanding" packets. According
to Snort's docs:
Outstanding indicates how many packets are buffered awaiting
processing. The way this is counted varies per DAQ so the DAQ
documentation should be consulted for more info.
Searching inside DAQ's README I don't see any reference about
outstanding packets.
How daq manages these packets?? How can I reduce outstanding stats??
Thanks.
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Question about outstanding packets C. L. Martinez (Feb 12)
- Re: Question about outstanding packets Al Lewis (allewi) (Feb 13)
