[OT] tcpdump overhead

[Wojciech Puchar]

>   make is how much overhead tcpdump will have on them (if any). It seems
>   to me that this overhead can be disregarded as influential but, if

depends how kmuch packets are actually gathered. if you tcpdump everything 
from loaded gigabit link it won't be small. you will have to use at least 
2-disk stripping to be able to write data ;)


i don't know if it's "official" docs, just generate some traffic, observe 
how much CPU is idle, then add tcpdump to the mix and do the math.

simple