3899 packets dropped by kernel, about 40%

abefroman · 11-17-2005, 11:13 AM

I have 3899 packets dropped by kernel about 40%, why are they being dropped? I dont have any IPtables.

root@105 [~]# tcpdump not port 22 | grep asdfasdf
tcpdump: listening on eth0
5610 packets received by filter
2422 packets dropped by kernel

root@105 [~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

root@105 [~]# tcpdump not port 22 | grep 104
tcpdump: listening on eth0

10509 packets received by filter
3899 packets dropped by kernel

It is not letting me view my website, I cant even telnet to port 80:
104 [~]# telnet myip 80
Trying myip ...
telnet: connect to address myip: Connection refused

Darin · 11-17-2005, 11:52 AM

From man tcpdump:

Quote:

packets ``dropped by kernel'' (this is the number of packets that were dropped, due to a lack of buffer space, by the packet capture mechanism in the OS on which tcpdump is running, if the OS reports that information to applications; if not, it will be reported as 0).

In English, that means packets are coming in off the network faster than tcpdump can pull them in for analysis.

As far as the website, is there a webserver running?

Code:

someguy@websvrx:~$ ps -ef | grep http
apache      853     1  0 Nov08 ?        00:00:30 /usr/sbin/httpd
nobody     855   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody     856   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody     857   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody     858   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody     859   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody    1187   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody    6653   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody    6654   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
nobody    6655   853  0 Nov08 ?        00:00:00 /usr/sbin/httpd
someguy   10287 10201  0 21:49 pts/3    00:00:00 grep http