On Fri, Jul 26, 2002 at 06:40:06PM +0200, Roland Kuhn wrote: > On Fri, 26 Jul 2002, Marc Haber wrote: > > it looks like reading from a socket opened with PF_PACKET, SOCK_DGRAM > > loses data if the system is non-trivially loaded. > > > What exactly is this non-trivial load? ISP-backbone type of load, roughly 5000 Packets a second, 8 Mbit sustained. > If it sometimes consumes the whole > of its timeslice then your net-acct is not scheduled for at least 10ms > which makes up about 50 packets. I don't know how long the queue is, > though... (might be 64kB, 50*mtu=75kB) We have set {r|w}mem_{max|default} to 256 Kbyte, but your calculation makes sense. Can the program learn if the queue has overflowed, so that it is able to yell at its admins for a larger queue? How can I give net-acct a chance to empty the queue before it is deferred again? Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Karlsruhe, Germany | lose things." Winona Ryder | Fon: *49 721 966 32 15 Nordisch by Nature | How to make an American Quilt | Fax: *49 721 966 31 29 - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html