capture_loss should exclude shunted connections

Description

Currently when a connection is shunted, it is not excluded from capture_loss calculation. This has decreased the usefulness of this log in monitoring cluster performance.

Ideally one could signal that a conn has been shunted, but I'm not familiar enough with Bro's internals to make a suggestion on the right mechanism.

Environment

None

Status

Assignee

Unassigned

Reporter

Keith Lehigh

Labels

None

External issue ID

None

Components

Affects versions

2.5.4

Priority

Normal
Configure