I looking for what's causing dropped packets on an interface:
RX packets:9064457 errors:0 dropped:4736 overruns:0 frame:0
TX packets:6388938 errors:0 dropped:0 overruns:0 carrier:0
I know it's not the firewall because it gets dropped before it would even reach that.
I made a dumpfile with: tcpdump -n -s0 -w interface_errors.pcap -i eth1
Then I try to analyze (replay) this dump with tshark/tcpdump:
tshark -r interface_errors.pcap not ip and not ipv6 and not arp
With this basically all I get is some LLDP Multicast, IPX packets from some windows machines. Is there any way to do further debugging to determine the root cause of these errors on the interface?
Thanks