I couldn't find this in the FAQ. I'm using 0.9.8 at the moment on linux (I'll upgrade tomorrow). I was investigating some stuff that's using the loopback interface under short-term heavy load, and noticed that ethereal and tcpdump get different results: tcpdump listed about 3 times as many packets as got captured with ethereal. There are no filters or anything fancy.
Is this a case of something getting overwhelmed inside the aux libraries?
Also - even tcpdump can't keep up with the count of packets sent as indicated by /proc/net/dev - I assume this is related to the same issue.
TIA. Please feel free to point me at a FAQ or something obvious I've missed.
f
_______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
