Re: bug in linux 2.2.10 and 2.2.12 ip or network layer

Alan Cox (alan@lxorguk.ukuu.org.uk)
Fri, 10 Sep 1999 20:23:34 +0100 (BST)


> So... BPF samples the packets before they hit the ethernet on the local
> machine, isn't that right? And therefore, tcpdump on the local machine

Yes but they may still be lost because the ethernet is full so they fall
out of the send queue. That isnt infinite either.

> should show all packets (providing that BPF doesn't lose packets, what
> is not the case here).

BPF can lose frames too. The "lost frame" reporting in the Linux bpf I've
seen also lies

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/