Add comments to "pcap_stats()" indicating what the counters mean on the

various platforms (assuming the vendors' documentation is correct and
that I've correctly interpreted it).

1 files changed, 12 insertions, 1 deletions

diff --git a/pcap-snit.c b/pcap-snit.c
index 47818e4f..a44812fe 100644
--- a/pcap-snit.c
+++ b/pcap-snit.c
@@ -25,7 +25,7 @@
 
 #ifndef lint
 static const char rcsid[] =
-    "@(#) $Header: /tcpdump/master/libpcap/pcap-snit.c,v 1.54 2000-10-28 00:01:30 guy Exp $ (LBL)";
+    "@(#) $Header: /tcpdump/master/libpcap/pcap-snit.c,v 1.55 2001-07-29 01:22:42 guy Exp $ (LBL)";
 #endif
 
 #ifdef HAVE_CONFIG_H
@@ -88,6 +88,17 @@ int
 pcap_stats(pcap_t *p, struct pcap_stat *ps)
 {
 
+	/*
+	 * "ps_recv" counts packets handed to the filter, not packets
+	 * that passed the filter.
+	 *
+	 * "ps_drop" counts packets dropped inside the "/dev/nit"
+	 * device because of flow control requirements or resource
+	 * exhaustion; it doesn't count packets dropped by the
+	 * interface driver, or packets dropped upstream.  As filtering
+	 * is done in userland, it counts packets regardless of whether
+	 * they would've passed the filter.
+	 */
 	*ps = p->md.stat;
 	return (0);
 }