Did the latest Centos4.x kernel break the ability to tcpdump with any
amount of traffic? Machines that used to be able to keep up now show a
few packets and stop - if you hit ^C they take a minute or so to do
anything, then show something like:
54 packets captured
18188 packets received by filter
18070 packets dropped by kernel
Before recent updates I almost never saw packets 'dropped by kernel'.
--
Les Mikesell
lesmikesell at gmail.com