Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Snort Advanced » PerfMonitor glitches?

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

PerfMonitor glitches?


Posted by maverick on March 09, 2005 06:30:38

Anyone else notice that perfmonitor is unable to pull statistics for various types of network traffic? So far I have seen that 802.11 and tagged VLAN traffic are basically ignored by the preprocessor. Has onyone else had this experience, or have you been able to work around it?

Posted by roesch on March 13, 2005 17:27:38

The perfmonitor stuff is mostly meant for straight Ethernet networks, the VLAN and 802.11 decoders haven't been instrumented to work with perfmon IIRC.

You could probably overload some of the counters that are used for Ethernet for other layer 2 protocols to get your metering. Try that and see if it works for you...

-Marty