Hi Jeff,
How often you get this message?
Every time you see it, you miss a packet. The way to read
that line is: libpcap passed only the first 37 bytes of
the datagram to pmacct; L4 appears to start at the 38th
octet; and you might have specified src_port or dst_port
in your aggregation method.
Hello again all!
Just recently I started seeing this line in my logs every couple of minutes;
Feb 28 23:34:57 gir pmacctd[12915]: INFO ( default/core ): short IPv4
packet read (37/38/frags). Snaplen issue ?
Gir being the name of my gateway machine.
Recent events include installation of an
