mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
34 lines
810 B
Text
34 lines
810 B
Text
# $Id: netstats.bro 564 2004-10-23 02:27:57Z vern $
|
|
|
|
@load notice
|
|
|
|
redef enum Notice += {
|
|
DroppedPackets, # Bro reported packets dropped by the packet filter
|
|
};
|
|
|
|
global last_stat: net_stats;
|
|
global last_stat_time: time;
|
|
global have_stats = F;
|
|
|
|
event net_stats_update(t: time, ns: net_stats)
|
|
{
|
|
if ( have_stats )
|
|
{
|
|
local new_dropped = ns$pkts_dropped - last_stat$pkts_dropped;
|
|
if ( new_dropped > 0 )
|
|
{
|
|
local new_recvd = ns$pkts_recvd - last_stat$pkts_recvd;
|
|
local new_link = ns$pkts_link - last_stat$pkts_link;
|
|
NOTICE([$note=DroppedPackets,
|
|
$msg=fmt("%d packets dropped after filtering, %d received%s",
|
|
new_dropped, new_recvd + new_dropped,
|
|
new_link != 0 ?
|
|
fmt(", %d on link", new_link) : "")]);
|
|
}
|
|
}
|
|
else
|
|
have_stats = T;
|
|
|
|
last_stat = ns;
|
|
last_stat_time = t;
|
|
}
|