[Snort-users] Perfmonitor / BPF Question

--===============0152664763==
Content-Type: multipart/alternative;
boundary="----=_Part_1154_4216886.1200495838256"

------=_Part_1154_4216886.1200495838256
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I have a sensor deployed with a BPF file to filter out our network
vulnerability scanners to keep the noise down. I notice when the scanner
makes a sweep that the dropped packets increase quite a bit.

My question is does the perfmonitor count packets dropped by the BPF in the
stats it tracks? That would explain the jumps in packet loss.

--
Robert Sharp
robertsharp@gmail.com

------=_Part_1154_4216886.1200495838256
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I have a sensor deployed with a BPF file to filter out our network vulnerability scanners to keep the noise down.&nbsp; I notice when the scanner makes&nbsp; a sweep that the dropped packets increase quite a bit.&nbsp; <br><br>My question is does the perfmonitor count packets dropped by the BPF in the stats it tracks?&nbsp; That would explain the jumps in packet loss.
<br clear="all"><br>-- <br>Robert Sharp<br><a href="mailto:robertsharp@gmail.com">robertsharp@gm ail.com</a>

------=_Part_1154_4216886.1200495838256--


--===============0152664763==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--===============0152664763==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============0152664763==--