Hi Aritz, > As far as I can understand, dma_writeq_full means that the card finds > the rx_ring full and overwrites a previous packet (so that packet is > lost). So how can the rx_discards (packets discarded) counter less > than the dma_writeq_full counter? > > Thank you > Regards > Aritz
To decrease the packet drops on your sniffing machine, you may also care about fast release of the rx-buffers. If you transfer packets or their headers to the userland, you might wish to look at PF_RING socket from the ntop projects. I have used several client machines with pktgen to generate a high packets load via a Cisco switch. Y may wish to monitor your switch ports statistics to understand, what is IN and what is OUT. -- Sincerely, ---------------------------------------------------------------- Robert Iakobashvili - NAVIGARE NECESSE EST coroberti at gmail dot com --------------------------------------------------------------- - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html