On Wed, 2016-05-04 at 11:05 -0700, Rick Jones wrote: > Assuming Peter's assertion about just drops when syncookies are not > enabled is accurate, should there be some one-time message in that case too?
We have plenty of drop points in the kernel without a message in syslog, but proper SNMP counter updates. Look at my recent commit 9caad864151e525 ("tcp: increment sk_drops for listeners") "ss -tm state listening" will show you the drop count per listener.