From: Ido Schimmel <ido...@idosch.org> Date: Thu, 29 Aug 2019 20:57:59 +0300
> On a software switch, when you run tcpdump without '-p', do you incur > major packet loss? No. Will this happen when you punt several Tbps to > your CPU on the hardware switch? Yes. > > Extending the definition of promiscuous mode to mean punt all traffic to > the CPU is wrong, IMO. You will not be able to capture all the packets This is so illogical, it is mind boggling. How different is this to using tcpdump/wireshark on a 100GB or 1TB network interface? There is no difference. Please stop portraying switches as special in this regard, they are not.