tcpdump drop info?

["Joe Elliott" <joe () inetd com>]

Hello,
   I am interested in knowing how the accounting of packets is done and
what this message means. Is the 280 unaccounted packets below just
overrun as the socket is closed? Are they lost in the preamble at
startup? ie I asked for a million packets, dropped non, but the filter
passed 280 more. Where did they go?

Thanx .. Joe.

> tcpdump -c 1000000 -i rl1 -s 96 -w /tmp/test.bin
tcpdump: listening on rl1
1000280 packets received by filter
0 packets dropped by kernel

[root () xqos01980 inetd com](/data/XQOS/src/Insight) > tcpdump -V
tcpdump version 3.7.1
libpcap version 0.7.2

[root () xqos01980 inetd com](/data/XQOS/src/Insight) > uname -a
FreeBSD xqos01980.inetd.com 4.5-RELEASE FreeBSD 4.5-RELEASE #0: Mon Jan 28
14:31:56 GMT 2002    
murray () builder freebsdmall com:/usr/src/sys/compile/GENERIC  i386

                                          __o       _~o       __o
                                         `\<,      `\<,      `\<,
 ______________________________________(*)/_(*)__(*)/_(*)__(*)/_(*)________
 Im a 21st Century Digital Boy ... I aint got a life, but I got lotsa toys.
 *******************     Joe Elliott  joe () inetd com    ********************
 Phone:(650)961-6631    Cell:(650)339-1156    Inetd.Com    http://inetd.com
 --------------------------------------------------------------------------



-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe