tcpdump can't always keep up with the packets
packets "dropped by kernel'' (this is the number
of packets that were dropped, due to a lack of
buffer space, by the packet capture mechanism in
the OS on which tcpdump is running, if the OS
reports that information to applications; if not,
it will be reported as 0).
Last edited by DavidPhillips; 12-08-2002 at 12:50 AM.