Question About new counter (captured) in tcpdump v3.8.1

[rmkml <rmkml () wanadoo fr>]

Hi,

I compiled/use tcpdump v3.8.1 (with libpcap 0.8.1)

and I have this (repeated) example results :

11568 packets captured
11574 packets received by filter
0 packets dropped by kernel

I started tcpdump with this args :
tcpdump381 -ns 0 -i xl0 -w /var/tmp/1.tcpdump

if I count packet in tcpdump file with wc tools :

tcpdump372 -nr /var/tmp/1.tcpdump | wc -l
   11568

tcpdump381 -nr /var/tmp/1.tcpdump | wc -l
   11568

My os is FreeBSD v4.9 Release
and my interface is 3com 3C905-TX Fast Etherlink XL (xl0)
I have added in my kernel HZ=1000
I have 90% cpu idle
No device polling enabled.

My question is, where diff packet passed ? (11574-11568=6)
How obtain this information ?

Thanks for your help.

Rmkml () Wanadoo fr

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe