tcpdump mailing list archives
tcpdump drop info?
From: "Joe Elliott" <joe () inetd com>
Date: Wed, 9 Apr 2003 14:35:57 -0700 (PDT)
Hello, I am interested in knowing how the accounting of packets is done and what this message means. Is the 280 unaccounted packets below just overrun as the socket is closed? Are they lost in the preamble at startup? ie I asked for a million packets, dropped non, but the filter passed 280 more. Where did they go? Thanx .. Joe.
tcpdump -c 1000000 -i rl1 -s 96 -w /tmp/test.bin
tcpdump: listening on rl1 1000280 packets received by filter 0 packets dropped by kernel [root () xqos01980 inetd com](/data/XQOS/src/Insight) > tcpdump -V tcpdump version 3.7.1 libpcap version 0.7.2 [root () xqos01980 inetd com](/data/XQOS/src/Insight) > uname -a FreeBSD xqos01980.inetd.com 4.5-RELEASE FreeBSD 4.5-RELEASE #0: Mon Jan 28 14:31:56 GMT 2002 murray () builder freebsdmall com:/usr/src/sys/compile/GENERIC i386 __o _~o __o `\<, `\<, `\<, ______________________________________(*)/_(*)__(*)/_(*)__(*)/_(*)________ Im a 21st Century Digital Boy ... I aint got a life, but I got lotsa toys. ******************* Joe Elliott joe () inetd com ******************** Phone:(650)961-6631 Cell:(650)339-1156 Inetd.Com http://inetd.com -------------------------------------------------------------------------- - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe
Current thread:
- Using TCPDUMP from Java Jordan Rivington (Apr 04)
- tcpdump drop info? Joe Elliott (Apr 09)
- Re: tcpdump drop info? Guy Harris (Apr 09)
- tcpdump drop info? Joe Elliott (Apr 09)