Ticket #720 (closed Problem: fixed)

Opened 6 months ago

Last modified 5 months ago

Fix problem with loss at low packet rate

Reported by: seth Owned by: jsiwek
Priority: High Milestone:
Component: Bro Version:
Keywords: Cc:

Description

Everyone that runs the 2.0 beta is having trouble with packet loss at very low volume. It seems to come from the default snaplength increase to 65535 and the inability with the old libpcap api to effectively increase the buffer size.

I don't know how to solve this problem yet, but we need to fix it very soon and it's a definite blocker for the release.

Change History

comment:1 Changed 5 months ago by robin

I think we should change this back to the old default and also add a new script-level variable snaplen to change (and may deprecate the -s option then).

comment:2 Changed 5 months ago by seth

  • Owner set to jsiwek
  • Status changed from new to assigned

Jon, could you take care of this?

comment:3 Changed 5 months ago by jsiwek

  • Status changed from assigned to closed
  • Resolution set to fixed

In [645c80f9742049e45cab9f7349ed34a1ddb722d8/bro]:

Reduce snaplen default from 65535 to old default of 8192. (fixes #720)

Also replaced the --snaplen/-l command line option with a
scripting-layer option called "snaplen" (which can also be
redefined on the command line, e.g. bro -i eth0 snaplen=65535).

comment:4 Changed 5 months ago by robin

In [edb6e80ff36e162dec0fe25c231f985fe8a3c24c/bro]:

Merge remote-tracking branch 'origin/fastpath'

  • origin/fastpath: Remove upgrade documentation regarding change in default snaplen. Reduce snaplen default from 65535 to old default of 8192. (fixes #720)

Closes #720.

comment:5 Changed 5 months ago by robin

  • Milestone Bro2.0 deleted

Milestone Bro2.0 deleted

Note: See TracTickets for help on using tickets.