Messages in this thread | | | Subject | Re: bug in linux 2.2.10 and 2.2.12 ip or network layer | Date | Fri, 10 Sep 1999 20:23:34 +0100 (BST) | From | Alan Cox <> |
| |
> So... BPF samples the packets before they hit the ethernet on the local > machine, isn't that right? And therefore, tcpdump on the local machine
Yes but they may still be lost because the ethernet is full so they fall out of the send queue. That isnt infinite either.
> should show all packets (providing that BPF doesn't lose packets, what > is not the case here).
BPF can lose frames too. The "lost frame" reporting in the Linux bpf I've seen also lies
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |