Wireshark · Wireshark-dev: Re: [Wireshark-dev] "packets dropped by kernel"

["Maynard, Chris" <Christopher.Maynard@xxxxxxxxx>]

I think you’re probably better off posting this question to the tcpdump-workers mailing list.

http://www.tcpdump.org/#lists

- Chris

 

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of sudhakar govindavajhala
Sent: Wednesday, June 09, 2010 8:33 PM
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] "packets dropped by kernel"

 

Hi all,

I apologize for asking a tcpdump question; just did not know where to find competent people to answer my question.

Can someone explain to me what this error message means:


375250 packets captured
375321 packets received by filter
69 packets dropped by kernel

Why do packets get dropped by kernel?  Is there a performance counter I can monitor to help me understand that the kernel is under stress?  Also, why were packets received by kernel, but not received by filter?  There should not be that much traffic on this link that the kernel is under load.

thanks,
--Sudhakar

CONFIDENTIALITY NOTICE: The contents of this email are confidential
and for the exclusive use of the intended recipient. If you receive this
email in error, please delete it from your system immediately and 
notify us either by email, telephone or fax. You should not copy,
forward, or otherwise disclose the content of the email.