[Ntop] packet lost or dropped by libpcap

[Noyes, Christopher A.]

Hello,

  What version of libpcap are you using?   Might be a good time to try
downloading the source and compiling the "latest and greatest" to see if
that helps.  That seems like an excessive amount of dropped packets for the
throughput you are talking about.  I'm not a debian person, but I do know in
Solaris there is some tuning to tcp that can be done to help perfomance
issues; perhaps debian has some similar settings?

-CN


-----Original Message-----
From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it]On Behalf Of
Jorge Cuevas
Sent: Wednesday, September 19, 2007 7:31 AM
To: ntop at unipi.it
Subject: [Ntop] packet lost or dropped by libpcap


Hi all, 

Im doing some tests and after capturing 6 days longs, with peaks of 1,6
Mbps, with averages of 2,0 kbps, with  total packets received
(ntop)=812,041, I find only 263,530 packets processed, and a 10% of
dropped (libpcap). 

The hard I am using is not the best in the market, but is not that bad:
Pentium 4 CPU 1500Hz, 1 G RAM, Debian 2.6.18-4-686.

Can anyone give me any clue about the reasons of dropped packets by
libpcap? Where can I gather information regarding performance of
libpcap, what things can be done for decreasing packet lost, or at least
the reason of this behaviour?  

Thanks in advance, 

Jorge   

_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop