Bluehost.com Web Hosting $6.95

[Snort-users] Snort 2.0.4 on OpenBSD 3.4 is dropping packets

This is a discussion on [Snort-users] Snort 2.0.4 on OpenBSD 3.4 is dropping packets within the Snort forums, part of the System Security and Security Related category; Hello, I was hoping someone could help me out here. I have Snort 2.0.4 installed on a new ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 11-17-2003
dlbox@comcast.net
 
Posts: n/a
Default [Snort-users] Snort 2.0.4 on OpenBSD 3.4 is dropping packets

Hello,

I was hoping someone could help me out here. I have Snort 2.0.4 installed on a
new OpenBSD 3.4 system.

Here is my system configuration:
Intel P4 3.06 GHz CPU
1GB RAM
80 GB HD
NetGear GA621 Fiber Ethernet Card (snort monitors this int)
Builtin 10/100 NIC (used for management)

I am using a NetOptics Fiber Tap to monitor traffic.
OpenBSD and Snort work fine, except that I notice that Snort drops packets,
where the previous installtion of RedHat 9 on the SAME box reported no dropped
packets. I have tuned Snort (rules, binary logging, etc,) to reduce dropped
packets, but I am wondering the following:

1. Is it true that Linux 'lies' about how many packets it drops?
2. Should expect to be dropping packets with such a fast box, or maybe I have
not done some important post-Install fixes on OpenBSD?
3. How can I determine the amount of bandwidth my interface is monitoring?


Thanks in advance,

Joe


-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/...=mm/g22lp.tmpl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 01:06 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0