When you do a tcpdump, and it's not fast enough to keep up with the flow of packets, it will tell you when the program exits how many packets it failed to count.
I'm using pmacct 0.8.8, and I'm trying to find out the cause of an accounting error; our upstream and ourselves differ by a consistent percentage and I'd like to know if it's my end that's in error. Is it possible to get periodic messages inserted into the syslog stating how many packets were missed, a la tcpdump? Thanks.
