Re: "packets dropped by kernel"

["Maynard, Chris" <Christopher.Maynard () GTECH COM>]

I think you're probably better off posting this question to the tcpdump-workers mailing list.
http://www.tcpdump.org/#lists
- Chris

From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of sudhakar 
govindavajhala
Sent: Wednesday, June 09, 2010 8:33 PM
To: wireshark-dev () wireshark org
Subject: [Wireshark-dev] "packets dropped by kernel"

Hi all,

I apologize for asking a tcpdump question; just did not know where to find competent people to answer my question.

Can someone explain to me what this error message means:


375250 packets captured
375321 packets received by filter
69 packets dropped by kernel

Why do packets get dropped by kernel?  Is there a performance counter I can monitor to help me understand that the 
kernel is under stress?  Also, why were packets received by kernel, but not received by filter?  There should not be 
that much traffic on this link that the kernel is under load.

thanks,
--Sudhakar
CONFIDENTIALITY NOTICE: The contents of this email are confidential
and for the exclusive use of the intended recipient. If you receive this
email in error, please delete it from your system immediately and 
notify us either by email, telephone or fax. You should not copy,
forward, or otherwise disclose the content of the email.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe