Why does tcpdump show few packet?



Hello.
I try to use tcpdump, and don't filter any packets.
debian:/home/zhengda# tcpdump -i eth0
tcpdump: verbose output suppressed, use -v or -vv for full protocol
decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
23:46:36.611022 IP 222.205.2.248.netbios-dgm >
222.205.2.255.netbios-dgm: NBT UDP PACKET(138)

1 packets captured
250 packets received by filter
0 packets dropped by kernel

There are 250 packets received by filter, why only 1 packets is
captured. But there is no filter rule at all.
Why?

.



Relevant Pages

  • odd tcpdump output w/ 6.0-BETA2 ...
    ... I get useless output from tcpdump (no ... header or protocol decode) but only when I specify a filter on the ... use -v or -vv for full protocol decode ... packets received by filter ...
    (freebsd-net)
  • Re: Packet capturing, iptables and eth0 vs. dummy0
    ... > tcpdump gets all packets from interface eth0 as seen in the bus, ... > filter, I cannot connect, but no output ... > comes from tcpdump, which is exactly what I expected in the case ... Is normal that tcpdump shows packets before they ...
    (Linux-Kernel)
  • Re: How to set NIC to promiscuous mode from FilterHook driver
    ... So from your reply I take it you are interested in getting packets destined to other hosts -that are not necessarily originated from the host your filter is running on-. ... As I said in my previous post, setting the adapter to promiscuous mode is not going to help you. ... the filter hook driver I mentioned is as per the msdn ...
    (microsoft.public.development.device.drivers)
  • Re: Some connections refused
    ... packets received by filter ... tcpdump: listening on eth0, link-type EN10MB, capture size ... This just means that something is filtering packets from your test client.. ... the server end, so without the port 25 filter, I see the ssh packets ...
    (comp.mail.sendmail)
  • Packet capturing, iptables and eth0 vs. dummy0
    ... tcpdump gets all packets from interface eth0 as seen in the bus, ... I'm listening, with tcpdump, to all packets in eth0. ... connect (without the filter I can do it normally), ...
    (Linux-Kernel)