On Nov 9, 2005, at 12:20 AM, Vossie wrote:
Ok in terms of the feature that I wanted to use... Is there a
command that
libpcap can use to detect lost packets?
To quote my earlier message:
"See packet lost" in what sense?
The only types of lost packet libpcap can report on - and it can only
do that on platforms that support this - are:
a packet that arrives at the host running the libpcap-based
application, is received by its network adapter/interface, and is
supplied to the networking stack, but is dropped by the packet
capture mechanism used by libpcap;
on a *very* few platforms (perhaps only Digital UNIX?), packets that
are discarded by the network adapter due to, for example, CRC errors.
It cannot, for example, detect packets lost on the network before
they arrive on the machine running the libpcap-based interface, such
as packets dropped by a router or switch because packet buffers
overflowed; that would have to be done, somehow, by the application
using libpcap.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
