Re: Warning on enabling ip6 protochain 6

[Guy Harris <guy () alum mit edu>]

On Aug 8, 2011, at 6:22 PM, ramkumar.paranandi () gmail com wrote:

> Can we expect any packet drop by the kernel due to this warning?

If a lot of the traffic on your network isn't TCP, so that a lot of traffic would've been discarded by the filter if it 
could've been run in the kernel, more traffic might be dropped than if the kernel could have done the filtering.

> If so, what kind of packets would kernel drop?

Packets that arrive when the buffer for the PF_PACKET socket is full.  That could be *any* kind of traffic, whether 
it's TCP or not.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.