Dropped packets - tcpdump

Hi all...

Anyone knows if there is some way to log the dropped packets in tcpdump?
I already search in google for it but didn't find anything...

Thxs

[]s

--
Cloves Pereira Costa Jr
M2Sys Tecnologia

+55 41 3271-4400
+55 41 8413-6740
www.m2sys.com.br
cloves.costa@m2sys.com.br

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: Dropped packets - tcpdump

On Feb 6, 2008 1:07 PM, Cloves Pereira Costa Jr
wrote:
> Hi all...
>
> Anyone knows if there is some way to log the dropped packets in tcpdump?
> I already search in google for it but didn't find anything...

The reason they're dropped in the first place is that your system is
too slow to do.. whatever you're doing with them, in realtime, and not
dropping packets would result in an infinitely growing buffer.

I don't know how you might configure the size of that buffer (a larger
one /would/ quite possibly help), but if you dump to disk using the -w
(and -s 0?) parameter, that might help.

Otherwise, get a faster machine. ;)

--
In a demon-haunted world, science is a candle in the dark
http://dresdencodak.com/
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: Dropped packets - tcpdump

Hi...

My machine is a DELL PowerEdge 2500 with 2 CPU PIII 1 GHz, 2 GB RAM, 25=
0
GB HD SCSI... This configuration is slow?

One more question, the fact that tcpdump drop the packets don't imply
that theese packets are being dropped also in the comunication?

[]s

Cloves

Em Qua, 2008-02-06 às 19:42 +0100, Svein Ove Aas escreveu:
> On Feb 6, 2008 1:07 PM, Cloves Pereira Costa Jr
> wrote:
> > Hi all...
> >
> > Anyone knows if there is some way to log the dropped packets in tcp=
dump?
> > I already search in google for it but didn't find anything...
>=20
> The reason they're dropped in the first place is that your system is
> too slow to do.. whatever you're doing with them, in realtime, and no=
t
> dropping packets would result in an infinitely growing buffer.
>=20
> I don't know how you might configure the size of that buffer (a large=
r
> one /would/ quite possibly help), but if you dump to disk using the -=
w
> (and -s 0?) parameter, that might help.
>=20
> Otherwise, get a faster machine. ;)
>=20


-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: Dropped packets - tcpdump

On Feb 6, 2008 8:03 PM, Cloves Pereira Costa Jr
wrote:
> Hi...
>
> My machine is a DELL PowerEdge 2500 with 2 CPU PIII 1 GHz, 2 GB RAM, 250
> GB HD SCSI... This configuration is slow?
>
For some purposes, yes. How many packets a second were you handling,
and how? How large were they/how many kilobytes/second? SSH session,
perhaps?


> One more question, the fact that tcpdump drop the packets don't imply
> that theese packets are being dropped also in the comunication?
>
It doesn't imply anything either way. They may be being dropped, or
not, depending on the actual system load and interface capacity;
tcpdump uses a lot more CPU time than the normal path.
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html