> Hmmm, I thought I tried setting the buffer space available to BPF under > FreeBSD 4.3 to 256kB but was still seeing packet droppage with GigE even > with 1500 byte frames. You can do this with sysctl without having to have > the program do it, AFAIK. i'm making tests with 58 bytes snapshot size , but after several days test I have reduce it to 38 (for 3 day with average ~10kpps there was only 2 packets with ip header size > 20bytes) 38bytes == ethernet header (14 bytes) + ip header (20 bytes) + 4 bytes (tcp/udp ports) with this configuration I don;t have any dropped packets .
> Which OS and version are you doing this on? FreeBSD 4.5 On my tests , increasing buffer size, CPU is loaded several % more with very same traffic and without packet drops. m. ----- Original Message ----- From: "Richard Sharpe" <[EMAIL PROTECTED]> To: "Mihail Balikov" <[EMAIL PROTECTED]> Cc: "Darren Reed" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Saturday, June 15, 2002 7:58 PM Subject: Re: [tcpdump-workers] packet direction > On Sat, 15 Jun 2002, Mihail Balikov wrote: > > > I have writ my own pcap_open_live which allows user to increase buffer > > (currently i'm making tests with 192KB. with 80kpps threre's not any dropped > > packets) > > Hmmm, I thought I tried setting the buffer space available to BPF under > FreeBSD 4.3 to 256kB but was still seeing packet droppage with GigE even > with 1500 byte frames. You can do this with sysctl without having to have > the program do it, AFAIK. > > Which OS and version are you doing this on? > > Regards > ----- > Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED] > > - > This is the TCPDUMP workers list. It is archived at > http://www.tcpdump.org/lists/workers/index.html > To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe > - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe