TCP Control Block Logging (tcplog)


Original netstat author, Mark Parris (MAP), Michele Clark Weigle (MAC)




Logging Overview:

The tcpstat structure contains various statistics for an interface that netstat queries. Variables have been added to this structure to hold logging information. The most important are the buffers, tcps_buff[2]. One buffer holds data that is currently being logged by the kernel, while the other buffer is written to disk. Each buffer consists of a circular array of packet data structures.

Kernel Files Changed:

(look for #ifdef TCP_LOG)

Kernel Files Added:


Bufdump Output:

Other DiRT documents
Author: Michele Weigle