[tcpdump-workers] Different/Same queue used for promiscuous capture on ethernet ?

2013-10-05 Thread abhinav narain
Hi Everyone, I am doing a packet capture on 480 MHz router on ethernet interface using pcap and see packet drops for anything greater than 50-60 Mbps. My question is following : Does pcap (and hence the kernel) create a new queue for all the packets in the promiscuous or is it collecting all packe

Re: [tcpdump-workers] Different/Same queue used for promiscuous capture on ethernet ?

2013-10-05 Thread Guy Harris
On Oct 5, 2013, at 10:20 AM, abhinav narain wrote: > Hi Everyone, > I am doing a packet capture on 480 MHz router on ethernet interface using > pcap and see packet drops for anything greater than 50-60 Mbps. > > My question is following : > Does pcap (and hence the kernel) create a new queue fo

Re: [tcpdump-workers] Different/Same queue used for promiscuous capture on ethernet ?

2013-10-05 Thread abhinav narain
Hi Guy, I infer from "eth0" that this is Linux. (DD-WRT or some other > OpenWRT-based project?) > > Yes. OpenWrt based netgear router. > On Linux, libpcap creates a PF_PACKET socket for each open pcap_t for a > regular network interface such as eth0. Each PF_PACKET socket has a queue > of its