Kernel dropping packets...
One of the companies I work for has a set if servers behind their Firewall.
The firewall has openings for web, ftp, and email access to those servers from the outside world. The company hosts their own site and mail servers. They have a DSL connection to the Internet, and have an ISP pointing their DNS entries to the boxes for them.
Periodically, the mail server will slow to a crawl where mail sending is concerned.
I've run a tcpdump capture of traffic and the majority of the traffic appears to be reverse DNS lookups for the server's private IP address (192.168.x.x).
After running the tcpdump utility for just a few minutes (maybe 5 or so), I see that the filter captured 49,267 packets. But it reports that the kernel dropped 4598 packets.
Where can I look to find the cause of this problem?
|