dropwatch man page

dropwatch — kernel dropped packet monitoring utility

Synopsis

dropwatch [-l method | list]

Description

dropwatch is an interactive utility for monitoring and recording packets that are dropped by the kernel.

Options

-l method | list, --lmethod method | list

Select the translation method to use when a drop alert arrives.  By default the raw instruction pointer of a drop location is output, but by the use of the -l option, we can assign a translation method so that the instruction pointer can be translated into function names.  Currently supported lookup methods are:

list

Show all supported methods.

kas

Use /proc/kallsyms to lookup instruction pointers to function mappings.

Interactive Commands

start

Tells the kernel to start reporting dropped packets.

stop

Tells the kernel to discontinue reporting dropped packets.

exit

Exits the dropmonitor program.

help

Displays summary of all commands.

set alertlimit value

Sets a triggerpoint to stop monitoring for dropped packets after value alerts have been received.

Info

Mar 2009 Neil Horman