Revision history [back]
Tshark dropped packets on MacOS Catalina
Testing Tshark results in some n of packets being dropped. WS is working fine. Not sure best way to go about investigating this - perhaps a problem with this MacOS? e.g.
tshark -a filesize:2 -w testshark3.pcap
Capturing on 'Wi-Fi: en0'
14
2 packets dropped from Wi-Fi: en0
tshark -a filesize:2 -w testshark4.pcap
Capturing on 'Wi-Fi: en0'
8
12 packets dropped from Wi-Fi: en0
tshark -a filesize:2 -w testshark5.pcap
Capturing on 'Wi-Fi: en0'
10
tshark -a filesize:10 -w testshark6.pcap
Capturing on 'Wi-Fi: en0'
41
5 packets dropped from Wi-Fi: en0
tshark -v
TShark (Wireshark) 3.4.5 (v3.4.5-0-g7db1feb42ce9)
Version info:
Copyright 1998-2021 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with libpcap, without POSIX capabilities, with GLib 2.58.3,
with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4, with
GnuTLS 3.6.15 and PKCS #11 support, with Gcrypt 1.8.7, with MIT Kerberos, with
MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with Zstandard,
with Snappy, with libxml2 2.9.9.
Running on Mac OS X 10.15.6, build 19G2021 (Darwin 19.6.0), with Intel(R)
Core(TM) i7-4980HQ CPU @ 2.80GHz (with SSE4.2), with 16384 MB of physical
memory, with locale en_US.UTF-8, with libpcap version 1.9.1, with GnuTLS 3.6.15,
with Gcrypt 1.8.7, with brotli 1.0.9, with zlib 1.2.11, binary plugins supported
(0 loaded).
Built using clang 4.2.1 Compatible Apple LLVM 11.0.0 (clang-1100.0.33.16)
MacBook Pro (Retina, 15-inch, Mid 2015) MacOS 10.15.16
Tshark dropped packets on MacOS Catalina
Testing Tshark results in some n of packets being dropped. WS is working fine. Not sure best way to go about investigating this - perhaps a problem with this MacOS? e.g.
Version info:
MacBook Pro (Retina, 15-inch, Mid 2015) MacOS 10.15.16
Tshark dropped packets on MacOS Catalina
Testing Tshark results in some n of packets being dropped. WS is working fine. Not sure best way to go about investigating this - perhaps a problem with this MacOS? e.g.
tshark -a filesize:2 -w testshark3.pcap Capturing on 'Wi-Fi: en0' 14 2 packets dropped from Wi-Fi: en0
tshark -a filesize:2 -w testshark4.pcap Capturing on 'Wi-Fi: en0' 8 12 packets dropped from Wi-Fi: en0
tshark -a filesize:2 -w testshark5.pcap Capturing on 'Wi-Fi: en0' 10
tshark -a filesize:10 -w testshark6.pcap Capturing on 'Wi-Fi: en0' 41 5 packets dropped from Wi-Fi: en0
tshark -v TShark (Wireshark) 3.4.5 (v3.4.5-0-g7db1feb42ce9)
Copyright 1998-2021 Gerald Combs gerald@wireshark.orggerald@wireshark.org and contributors.
License GPLv2+: GNU GPL version 2 or later https://www.gnu.org/licenses/gpl-2.0.html
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with libpcap, without POSIX capabilities, with GLib 2.58.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4, with GnuTLS 3.6.15 and PKCS #11 support, with Gcrypt 1.8.7, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.9.
Running on Mac OS X 10.15.6, build 19G2021 (Darwin 19.6.0), with Intel(R) Core(TM) i7-4980HQ CPU @ 2.80GHz (with SSE4.2), with 16384 MB of physical memory, with locale en_US.UTF-8, with libpcap version 1.9.1, with GnuTLS 3.6.15, with Gcrypt 1.8.7, with brotli 1.0.9, with zlib 1.2.11, binary plugins supported (0 loaded).
Built using clang 4.2.1 Compatible Apple LLVM 11.0.0 (clang-1100.0.33.16)
MacBook Pro (Retina, 15-inch, Mid 2015) MacOS 10.15.16