Capturing 10 gigabit traffic with no packet loss at line speed is difficult at best. Make sure that you've configured the IRQ affinity properly on the sending and receiving sides to start. On Aug 14, 2016 11:52 AM, "Gordon Messmer" <gordon.messmer@xxxxxxxxx> wrote: > On 08/14/2016 03:20 AM, Anand Buddhdev wrote: > >> The number 6882162 is exactly the number of DNS queries I am sending >> from another server (the source). The filter is seeing them. However, >> not all of them make it into the pcap file. >> > > Try specifying "ether host <src mac>" and compare the pcap files. How are > you counting the number of packets in the pcap file? > _______________________________________________ > CentOS mailing list > CentOS@xxxxxxxxxx > https://lists.centos.org/mailman/listinfo/centos > _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx https://lists.centos.org/mailman/listinfo/centos