Re: high cpu load with tcpdump

[6bone%6bone.informatik.uni-leipzig.de@localhost]

On Sat, 27 Feb 2016, Joerg Sonnenberger wrote:

> fstat should tell you what the file descriptor is, I just want to
> identify what device seems to have the trouble.

You're right.

USER     CMD          PID   FD MOUNT       INUM MODE         SZ|DV R/W
_tcpdump tcpdump      823 root /        14249633 drwxr-xr-x     512 r
_tcpdump tcpdump      823   wd /        14249633 drwxr-xr-x     512 r
_tcpdump tcpdump      823    0 /dev/pts       5 crw--w--w-   pts/1 rw
_tcpdump tcpdump      823    1 /dev/pts       5 crw--w--w-   pts/1 rw
_tcpdump tcpdump      823    2 /dev/pts       5 crw--w--w-   pts/1 rw
_tcpdump tcpdump      823    3* bpf rec=0, dr=0, cap=0, pid=823, seesent, idle
_tcpdump tcpdump      823    4 /        9157214 -rw-r--r--   25628 r
_tcpdump tcpdump      823    5* kqueue pending 0
_tcpdump tcpdump      823    6 /        9157439 -rw-r--r--      71 r



Regards
Uwe