On Thu, Feb 06, 2003 at 08:34:22PM +1100, Brad Hards wrote: > 1. Irrespective of this patch, it looks like ethereal can't capture every > packet. This is particularly noticable when using the loopback interface for > testing. I'm not sure why it occurs. I know that distcc does make heavy use of > sendfile(), and perhaps pcap is running out of buffering space. I haven't > tried tcpdump yet, nor have I done a lot of tests with a real network.
Try it with tcpdump; if that fails as well, it's probably either an issue with libpcap or with the underlying packet capture mechanism in the OS.