Re : Big Packet loss and PacketFilter::Dropped_Packets

Zeek
1

I am using the basic PF_Ring edition to monitor the interfaces. Is that what is causing the issues ? What kind of throughput can the basic PF_Ring (non ZC) handle ? If I am looking at network traffic above 100 mbps will I definitely need the PF_Ring ZC edition ?

Regards,

Vikram Basu
Seceon Inc.

2

Might want to take a look at this. https://www.bro.org/documentation/faq.html#how-can-i-reduce-the-amount-of-captureloss-or-dropped-packets-notices We had issues with dropped packets until I disabled offloading...etc on the monitoring nic.