From 5f613e6e7deb0efc7c4b13a982402ef9126a4a27 Mon Sep 17 00:00:00 2001 From: Phil Young Date: Mon, 17 Jul 2017 10:08:02 -0400 Subject: [PATCH] napatech: Added section describing packet counters. --- doc/userguide/capture-hardware/napatech.rst | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/doc/userguide/capture-hardware/napatech.rst b/doc/userguide/capture-hardware/napatech.rst index 3a548bb0dc..e9c38f9a36 100644 --- a/doc/userguide/capture-hardware/napatech.rst +++ b/doc/userguide/capture-hardware/napatech.rst @@ -210,6 +210,23 @@ Now you are ready to start Suricata:: $ suricata -c /usr/local/etc/suricata/suricata.yaml --napatech --runmode workers +------------------------------------ +Counters + +For each stream that is being processed the following counters will be output in stats.log: + nt.pkts - The number of packets recieved by the stream. + nt.bytes - The total bytes received by the stream. + nt.drop - The number of packets that were dropped from this stream due to + buffer overflow conditions. + +If hba is enabled the following counter will also be provided: + nt.hba_drop - the number of packets dropped because the host buffer allowance + high-water mark was reached. + +In addition to counters host buffer utilization is tracked and logged. This is also useful for +debugging. Log messages are output for both Host and On-Board buffers when reach 25, 50, 75 +percent of utilization. Corresponding messages are output when utilization decreases. + Support -------