In my case, I was just noticing that libpcap was reporting a large number of dropped packets. So, it was actually telling me. But, in the case that it wasn't, you could do a comparison to the switchport that the listening interface is connected. If the switchport says 100,000 packets have passed, but ntop/libpcap and such only report being fed 60,000, you'd know you have a problem. You could clear the counters on the port and start ntop at roughly the same time. That would give a good comparison.
-Chris -----Original Message----- From: The Jetman [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 21, 2004 4:32 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] dropped packets ----- Original Message ----- From: "Burton M. Strauss III" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, April 21, 2004 15:38 PM Subject: RE: [Ntop] dropped packets > FreeBSD, eh -- as Stanley would say, welcome to the side of might and right. > > Still, that's completely WEIRD, because Luca's measurements show Linux drops > a lot fewer packets than FreeBSD. > I've always wondered about this WRT to FBSD, but how does one know that the system is in fact dropping packets *IF* libpcap doesn't report dropped packets ? =============== From the desk of Jethro Wright, III ================ + If it's there, and you can see it, it's real. + + If it's not there, and you can see it, it's virtual. + + If it's there, and you can't see it, it's transparent. + + If it's not there, and you can't see it, you erased it. + === jetman516 'at' hotmail.com ========================== Anon === _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
