From owner-freebsd-questions@FreeBSD.ORG  Mon Mar 10 17:33:17 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5CED91065684
	for <freebsd-questions@freebsd.org>;
	Mon, 10 Mar 2008 17:33:17 +0000 (UTC)
	(envelope-from mario.lobo@ipad.com.br)
Received: from ipad.com.br (recife.ipad.com.br [200.249.204.129])
	by mx1.freebsd.org (Postfix) with SMTP id 7D74C8FC28
	for <freebsd-questions@freebsd.org>;
	Mon, 10 Mar 2008 17:33:15 +0000 (UTC)
	(envelope-from mario.lobo@ipad.com.br)
Received: (qmail 60975 invoked by uid 79); 10 Mar 2008 17:33:12 -0000
Received: from 192.168.64.1 by recife.ipad.com.br (envelope-from
	<mario.lobo@ipad.com.br>, uid 1008) with qmail-scanner-1.25-st-qms 
	(clamdscan: 0.92rc2/6188. spamassassin: 3.1.8. perlscan: 1.25-st-qms. 
	Clear:RC:1(192.168.64.1):. 
	Processed in 0.022185 secs); 10 Mar 2008 17:33:12 -0000
X-Antivirus-IPAD-Mail-From: mario.lobo@ipad.com.br via recife.ipad.com.br
X-Antivirus-IPAD: 1.25-st-qms (Clear:RC:1(192.168.64.1):. Processed in
	0.022185 secs Process 60967)
Received: from unknown (HELO lobo.ipad.com.br)
	(mario.lobo@ipad.com.br@192.168.64.1)
	by ipad.com.br with SMTP; 10 Mar 2008 17:33:12 -0000
From: Mario Lobo <mario.lobo@ipad.com.br>
Organization: IPAD
To: Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
Date: Mon, 10 Mar 2008 14:33:17 -0300
User-Agent: KMail/1.9.7
References: <200803101001.58362.mario.lobo@ipad.com.br>
	<20080310164418.D5681@wojtek.tensor.gdynia.pl>
In-Reply-To: <20080310164418.D5681@wojtek.tensor.gdynia.pl>
X-Face: ,55PTLsK{\?org*WH[[%>IJpi}pb?lwVxsDL<:}(Ti2yN(w/k\"enXx"?CbN[hp<!l)o6)=?utf-8?q?=0A=09p=60*W8?=";
	R_8L]_u:HO7jC#Qx[H/#1C{!qn1gz3}QRs9tuiz4+MJary8d-FpL0X'T[@=?utf-8?q?=3Dd4=26=5D=0A=09-=27U!W?=<b%qS9d|2pqAr;
	-SJ*qpxBV<.G`]jYY_?4n]s=K3*X5'Q5M3G'H*HF
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Message-Id: <200803101433.18559.mario.lobo@ipad.com.br>
Cc: freebsd-questions@freebsd.org
Subject: Re: [OT?] tcpdump overhead
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Mar 2008 17:33:17 -0000

On Monday 10 March 2008, you wrote:
> > I am writing a final paper for a PG course and  I need to take precise
> > measurements on network performance. I gonna be doing lots of packet
> > dumps and I would like to know you guys' opinion on how much of tcpdump
> > overhead (if meaningful for these measurements) I should take into
> > account.
> >
> > If there are any readings on the subject you could point me to...
>
> no idea but small for sure. it would rather cause tcpdump to not catch all
> packets that network performance drop.

Thanks for the reply Wojciech.

=46orgive my english but I couldn't quite get what you meant by:

"it would rather cause tcpdump to not catch all packets that network=20
performance drop."

Could you rephrase that for me please ?

Thanks
=2D-=20
Mario Lobo
Seguran=E7a de Redes - Desenvolvimento e An=E1lise
IPAD - Instituto de Pesquisa e Apoio ao Desenvolvimento Tecnol=F3gico e=20
Cient=EDfico