Netstat

[chrisstevens]

Hi,

I am wondering if someone could please explain a question I have regarding netstat?
When performing a "netstat -s" I receive the following information regarding dropped packets under Ip:

Ip:
93978695 total packets received
0 forwarded
0 incoming packets discarded
79472157 incoming packets delivered
65235033 requests sent out
29527 outgoing packets dropped

However if I run a "netstat -i" I have no dropped packets whatsoever: (apologies for the table format)

Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
bond0 1500 0 34326528 0 0 0 72755307 0 0 0 BMmRU
bond0:1 1500 0 - no statistics available - BMmRU
bond1 1500 0 28605491 0 0 0 20948952 0 0 0 BMmRU
eth0 1500 0 34199550 0 0 0 72755278 0 0 0 BMsRU
eth1 1500 0 126978 0 0 0 29 0 0 0 BMsRU
eth2 1500 0 97911 0 0 0 1 0 0 0 BMsRU
eth3 1500 0 28507580 0 0 0 20948951 0 0 0 BMsRU
lo 16436 0 34094225 0 0 0 34094225 0 0 0 LRU

TIA
Chris

[bobdoll]

Hi,

I'm trying to understand why i have some many "outgoing packets dropped" while my NIC doesn't report any thing. So it should not be a hardware issue but the kernel dropping packets. I would like to understand what & why and how to prevent it (if need be).

The server is mostly an office use with : samba, nat, ldap, apache, mysql. It's really not busy. I monitor everything, TCP sockets rarely go over 700. But inside we do get some random site out when web browsing (which i believe is link to the packet dropped)

dell server - Xeon quadcore - 2G
2.6.18-53.1.14.el5.centos.plus 64bits
Simple iptables rules

Ip:
82594302 total packets received
487 with invalid headers
92739 with invalid addresses
47441023 forwarded
0 incoming packets discarded
34148937 incoming packets delivered
71880491 requests sent out
21378 outgoing packets dropped
1 fragments dropped after timeout
465 reassemblies required
231 packets reassembled ok
1 packet reassembles failed
158 fragments received ok
317 fragments created
(current uptime 17days)

Any clue how to explain that, or if i cna do something to the kernel or other to get some logs to understand why those packets get dropped ?