> OK, great thanks, my program forwards packets from one interface to > another, and it seems that my application does not receive as many > packets as the snoop command registers (for the same interface). > > I've made sure that all threads receiving on the interface have a > handle of their own, and also mutexing their access to the handle and > the corresponding file descriptor. > > I do, however, have other threads that write to their own handles > (opened on the same interface as above) without mutexing with the > readers or themselves. > > to clarify: all threads (readers and writers) have their own handle > open to the same NIC, but only the reading is mutexed.
Perhaps packets are getting dropped in the kernel? Are you using bufmod like snoop does? -- meem