This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

tshark reporting packet loss

0

Greetings All;

I run tshark to capture date for 45 seconds. At the end of 45 seconds tshark stops and reports:

6504 79 packets dropped

I assume that 6504 is the number of packets captured.

I am confused as to the 79 packets dropped. Are these packets that are somehow dropped by wireshark (maybe for memory reasons ?), or are these packets it believes are somehow dropped in the network.

I am running virtual box guest on a win 7 host, and running wireshark within the guest. The guest is in "bridged mode" so it has its own network ip. Is there anything I need to be real careful about when doing this ??

thanks as always; Walter

asked 28 Mar '12, 13:32

wakelt's gravatar image

wakelt
13101013
accept rate: 0%

edited 30 Mar '12, 16:29

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142


One Answer:

0

I believe the accepted answer to question 2095, What does "packets dropped" really mean? should help you.

answered 30 Mar '12, 16:28

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%