This is our old Q&A Site. Please post any new questions and answers at

For tcmdump or dumpcap, is it possible to have the dropped packets counter statistics during the capture? Currently only available at the end of the capture...

How can I know if my capture is missing packets in real-time?

Update: I've discovered that pressing CTRL+T (sending SIGINFO according to manpage) during a dumpcap -q capture, displays some info on demand, maybe could add afix to display dropped packets if the info is available:

load: 1.32  cmd: dumpcap 4451 running 0.04u 0.03s
Packets captured: 8

asked 26 Oct '16, 13:56

TomLaBaude's gravatar image

accept rate: 66%

edited 31 Oct '16, 14:53


As an example:

tshark -i 1 -qz icmp,srt

This will show # of packets lost and also a % of packet loss.

hope this is helpful, John

permanent link

answered 31 Oct '16, 13:06

John_Modlin's gravatar image

accept rate: 0%

All of this is available at the end of the capture, I was asking for packet drop info during the capture

(31 Oct '16, 14:50) TomLaBaude
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 26 Oct '16, 13:56

question was seen: 2,018 times

last updated: 31 Oct '16, 14:53

p​o​w​e​r​e​d by O​S​Q​A