From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Svein Ove Aas" Subject: Re: Dropped packets - tcpdump Date: Wed, 6 Feb 2008 19:42:28 +0100 Message-ID: <221b53ab0802061042x281d8287j61d620bf85e4c09e@mail.gmail.com> References: <1202299652.5984.17.camel@wtprcwbti01002> Reply-To: sveina@gmail.com Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:reply-to:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; bh=qxQGdtF7nd8zQH9GsSetEK/yRciufN2ma3WFz4ZGPfg=; b=lWztcMnmqwXAg3gxncIubYnx3dp+BZWH0tfihMV1Upe/FeEu6zBKFGomnwwC/ROqWyXYQ8SSC1dv+48dic7mAgtMNPaPVd4mpTunQFew2bfVHQTmrV2gYmiQri12hmKSIQ8EQeln431Fyp8gPiZuA3XHRGO3Ju+ZZaieM/hZLBw= In-Reply-To: <1202299652.5984.17.camel@wtprcwbti01002> Content-Disposition: inline Sender: linux-admin-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" To: cloves.costa@m2sys.com.br Cc: Linux Net ML , Linux-Admin ML On Feb 6, 2008 1:07 PM, Cloves Pereira Costa Jr wrote: > Hi all... > > Anyone knows if there is some way to log the dropped packets in tcpdump? > I already search in google for it but didn't find anything... The reason they're dropped in the first place is that your system is too slow to do.. whatever you're doing with them, in realtime, and not dropping packets would result in an infinitely growing buffer. I don't know how you might configure the size of that buffer (a larger one /would/ quite possibly help), but if you dump to disk using the -w (and -s 0?) parameter, that might help. Otherwise, get a faster machine. ;) -- In a demon-haunted world, science is a candle in the dark http://dresdencodak.com/