If you look at the scenarios in my docs/FAQ article, it's possible that the NIC is dropping packets because it's buffers are overflowing (that is the CPU isn't processing the interrupts fast enough) and various drivers account for that in different ways - some just ignore them. Hence you might (or might not) see the difference in the ifconfig counts. Or not.
-----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Chris > Beck > Sent: Wednesday, April 21, 2004 6:40 PM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] dropped packets > > > In my case, I was just noticing that libpcap was reporting a > large number of > dropped packets. So, it was actually telling me. But, in the case that it > wasn't, you could do a comparison to the switchport that the listening > interface is connected. If the switchport says 100,000 packets > have passed, > but ntop/libpcap and such only report being fed 60,000, you'd > know you have > a problem. You could clear the counters on the port and start ntop at > roughly the same time. That would give a good comparison. > > -Chris <snip /> _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
