tcpdump mailing list archives

Re: Warning on enabling ip6 protochain 6


From: ramkumar.paranandi () gmail com
Date: Mon, 8 Aug 2011 22:56:43 -0700

How much percentage of traffic in real world  scenarios would these kind (ipv6 chain)of packets consist?


Thanks,
./ram

On Aug 8, 2011, at 7:44 PM, Guy Harris <guy () alum mit edu> wrote:


On Aug 8, 2011, at 6:22 PM, ramkumar.paranandi () gmail com wrote:

Can we expect any packet drop by the kernel due to this warning?

If a lot of the traffic on your network isn't TCP, so that a lot of traffic would've been discarded by the filter if 
it could've been run in the kernel, more traffic might be dropped than if the kernel could have done the filtering.

If so, what kind of packets would kernel drop?

Packets that arrive when the buffer for the PF_PACKET socket is full.  That could be *any* kind of traffic, whether 
it's TCP or not.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: