Hello, What version of libpcap are you using? Might be a good time to try downloading the source and compiling the "latest and greatest" to see if that helps. That seems like an excessive amount of dropped packets for the throughput you are talking about. I'm not a debian person, but I do know in Solaris there is some tuning to tcp that can be done to help perfomance issues; perhaps debian has some similar settings?
-CN -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jorge Cuevas Sent: Wednesday, September 19, 2007 7:31 AM To: [email protected] Subject: [Ntop] packet lost or dropped by libpcap Hi all, Im doing some tests and after capturing 6 days longs, with peaks of 1,6 Mbps, with averages of 2,0 kbps, with total packets received (ntop)=812,041, I find only 263,530 packets processed, and a 10% of dropped (libpcap). The hard I am using is not the best in the market, but is not that bad: Pentium 4 CPU 1500Hz, 1 G RAM, Debian 2.6.18-4-686. Can anyone give me any clue about the reasons of dropped packets by libpcap? Where can I gather information regarding performance of libpcap, what things can be done for decreasing packet lost, or at least the reason of this behaviour? Thanks in advance, Jorge _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
