When I wrote to file it didnt drop anything at 300k [rcortiz@simon ~]$ sudo nice -10 /usr/sbin/tcpdump -i eth2.10 -s 90 -nn port 514 -B 16384 -w /tmp/tcpdump | cut -c 1-8 | uniq -c tcpdump: listening on eth2.10, link-type EN10MB (Ethernet), capture size 90 bytes 31107322 packets captured 31107430 packets received by filter 0 packets dropped by kernel
[rcortiz@simon ~]$ sudo tcpdump -r /tmp/tcpdump | cut -c 1-8 | uniq -c reading from file /tmp/tcpdump, link-type EN10MB (Ethernet) 65938 09:16:38 299999 09:16:39 300003 09:16:40 300001 09:16:41 299998 09:16:42 300001 09:16:43 300001 09:16:44 2 09:16:45 1 09:16:44 300000 09:16:45 300001 09:16:46 300004 09:16:47 299996 09:16:48 300004 09:16:49 300000 09:16:50 300000 09:16:51 300000 09:16:52 300000 09:16:53 300000 09:16:54 299999 09:16:55 300001 09:16:56 300000 09:16:57 300002 09:16:58 299998 09:16:59 300001 09:17:00 300002 09:17:01 300000 09:17:02 300003 09:17:03 Robert. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
