snoop

We are trying to debug an application that uses upd messages to track network packet loss. In our program we can see that we are entering a function that uses the (sys/socket.h)sendto() function. We are entering this function 12 time every 5 seconds. We send a upd message to 12 different servers. When we use snoop on the port that we are using we can see that sometimes snoop says we are not sending 12 messages. When we run snoop on the entire interface card and put the snoop output to a file we never lose any upd messages. If we run snoop on the entire interface card and pipe snoop's output to /dev/null we again see that we lose upd messages. Question is how does snoop change what we are seeing.

[719 byte] By [lconklin] at [2007-11-25 23:24:47]