Displaying 1 result from an estimated 1 matches for "c4096558".
2016 Aug 14
5
tcpdump loses lots of packets
...tcpdump.
However, tcpdump's performance is abysmal, and it loses lots of the
packets. Here's the output when I stop the capture:
# tcpdump -nn -i p1p1 -w /dev/shm/queries.pcap -B 65536 dst host
193.0.14.129
tcpdump: listening on p1p1, link-type EN10MB (Ethernet), capture size
65535 bytes
^C4096558 packets captured
6882162 packets received by filter
2785604 packets dropped by kernel
The number 6882162 is exactly the number of DNS queries I am sending
from another server (the source). The filter is seeing them. However,
not all of them make it into the pcap file. First I was writing to the
d...