On Aug 8, 2011, at 6:22 PM, ramkumar.parana...@gmail.com wrote: > Can we expect any packet drop by the kernel due to this warning?
If a lot of the traffic on your network isn't TCP, so that a lot of traffic would've been discarded by the filter if it could've been run in the kernel, more traffic might be dropped than if the kernel could have done the filtering. > If so, what kind of packets would kernel drop? Packets that arrive when the buffer for the PF_PACKET socket is full. That could be *any* kind of traffic, whether it's TCP or not. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
