bert hubert wrote: > Hi people, > > I like to use memory mapped pcap (PACKET_MMAP) since off the shelf, linux is > a tad prone to drop packets while capturing these days. It used to be lots > better at it, but right now memory mapped pcap is the only way to get things > working a bit. I've noticed this on many machines. > > However, memory mapped pcap has started to truncate outgoing packets for me > recently, and interestingly, I only see this with locally generated TCP > packets, not with locally generated ICMP packets. I haven't yet tried UDP, > nor actual sniffing, this is all locally generated packets going out on > eth0.
Are you using TSO on the outgoing device? If so please try to log the packet using iptables to see if it really is a TSO packet. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html