how to go about diagnosing cause of packet loss

[Ian FREISLICH]

"D G Teed" wrote:
> With some further experimentation, I've concluded
> that the real problem is ipaudit.  It cannot keep up
> with the bandwidth we have. When it is off, there
> is next to no packet loss.  Thanks for the reply...

Interesting.  I use ipacct to collect accounting data, maybe you
want some different data.  It uses a divert socket that ipfw writes
to with the tee action.  It has no problem keeping up at 70Mbit/s.
Maybe you're seeing traffic higher than that?

Ian

--
Ian Freislich