I think you're probably better off posting this question to the tcpdump-workers 
mailing list.
http://www.tcpdump.org/#lists
- Chris

From: [email protected] 
[mailto:[email protected]] On Behalf Of sudhakar 
govindavajhala
Sent: Wednesday, June 09, 2010 8:33 PM
To: [email protected]
Subject: [Wireshark-dev] "packets dropped by kernel"

Hi all,

I apologize for asking a tcpdump question; just did not know where to find 
competent people to answer my question.

Can someone explain to me what this error message means:


375250 packets captured
375321 packets received by filter
69 packets dropped by kernel

Why do packets get dropped by kernel?  Is there a performance counter I can 
monitor to help me understand that the kernel is under stress?  Also, why were 
packets received by kernel, but not received by filter?  There should not be 
that much traffic on this link that the kernel is under load.

thanks,
--Sudhakar
CONFIDENTIALITY NOTICE: The contents of this email are confidential
and for the exclusive use of the intended recipient. If you receive this
email in error, please delete it from your system immediately and 
notify us either by email, telephone or fax. You should not copy,
forward, or otherwise disclose the content of the email.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe

Reply via email to