Date: Thu, 18 Sep 2003 11:42:03 +1000 From: Edwin Groothuis <edwin@mavetju.org> To: Josh Brooks <user@mail.econolodgetulsa.com> Cc: freebsd-net@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... Message-ID: <20030918014203.GA59403@k7.mavetju> In-Reply-To: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Sep 17, 2003 at 06:31:03PM -0700, Josh Brooks wrote: > Whenever I run: > > tcpdump -vvv > > when I am finished, I am surprised to see: > > 27441 packets received by filter > 7866 packets dropped by kernel That's because the buffer of captures-but-not-yet-processed packets in tcpdump was filled up. In other words, your system is to slow to process the amount of traffic going through your machine. Edwin -- Edwin Groothuis | Personal website: http://www.mavetju.org edwin@mavetju.org | Weblog: http://www.mavetju.org/weblog/weblog.php
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030918014203.GA59403>