I would like to tcpdump and get all the packets...

[Edwin Groothuis]

On Wed, Sep 17, 2003 at 06:31:03PM -0700, Josh Brooks wrote:
> Whenever I run:
> 
> tcpdump -vvv
> 
> when I am finished, I am surprised to see:
> 
> 27441 packets received by filter
> 7866 packets dropped by kernel

That's because the buffer of captures-but-not-yet-processed packets
in tcpdump was filled up. In other words, your system is to slow
to process the amount of traffic going through your machine.

Edwin

-- 
Edwin Groothuis      |            Personal website: http://www.mavetju.org
edwin at mavetju.org    |    Weblog: http://www.mavetju.org/weblog/weblog.php