Re: high cpu load with tcpdump

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Sat, Feb 27, 2016 at 10:28:43PM +0100, 6bone%6bone.informatik.uni-leipzig.de@localhost wrote:
> On Sat, 27 Feb 2016, Joerg Sonnenberger wrote:
> 
> >Date: Sat, 27 Feb 2016 20:38:37 +0100
> >From: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
> >To: current-users%netbsd.org@localhost
> >Subject: Re: high cpu load with tcpdump
> >
> >On Sat, Feb 27, 2016 at 08:18:41PM +0100, 6bone%6bone.informatik.uni-leipzig.de@localhost wrote:
> >>  5015      1 tcpdump  1456559035.621583576 CALL  read(3,0x7f7ff7b16000,0x80000)
> >
> >FD 3 is a BPF instance?
> >
> >Joerg
> >
> 
> I don't know what FD 3 is used for, perhaps it could be a BPF descriptor.

fstat should tell you what the file descriptor is, I just want to
identify what device seems to have the trouble.

Joerg