[Ntop] packet lost or dropped by libpcap
Noyes, Christopher A.
christopher.noyes at pw.utc.com
Wed Sep 19 18:51:55 CEST 2007
What version of libpcap are you using? Might be a good time to try
downloading the source and compiling the "latest and greatest" to see if
that helps. That seems like an excessive amount of dropped packets for the
throughput you are talking about. I'm not a debian person, but I do know in
Solaris there is some tuning to tcp that can be done to help perfomance
issues; perhaps debian has some similar settings?
From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it]On Behalf Of
Sent: Wednesday, September 19, 2007 7:31 AM
To: ntop at unipi.it
Subject: [Ntop] packet lost or dropped by libpcap
Im doing some tests and after capturing 6 days longs, with peaks of 1,6
Mbps, with averages of 2,0 kbps, with total packets received
(ntop)=812,041, I find only 263,530 packets processed, and a 10% of
The hard I am using is not the best in the market, but is not that bad:
Pentium 4 CPU 1500Hz, 1 G RAM, Debian 2.6.18-4-686.
Can anyone give me any clue about the reasons of dropped packets by
libpcap? Where can I gather information regarding performance of
libpcap, what things can be done for decreasing packet lost, or at least
the reason of this behaviour?
Thanks in advance,
Ntop mailing list
Ntop at unipi.it
More information about the Ntop