Here's the output from ifconfig for eth0:

$ sudo ifconfig eth0
eth0 Link encap:Ethernet HWaddr 00:02:3F:7C:AC:CB
inet addr:66.30.27.46 Bcast:255.255.255.255 Mask:255.255.248.0
UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1
RX packets:7187105 errors:0 dropped:0 overruns:0 frame:0
TX packets:55 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:431229374 (411.2 MiB) TX bytes:10268 (10.0 KiB)
Interrupt:11 Base address:0xd000

How can I determine the reason behind the large disparity between
RX and TX packets?

FWIW, I'm using Debian stable.

Many thanks in advance,

-Jill

On Mon, 6 Oct 2003 17:56:30 +0000 (UTC), J Krugman
<jill_krugman@yahoo.com> wrote:
>
>
>
> Here's the output from ifconfig for eth0:
>
> $ sudo ifconfig eth0
> eth0 Link encap:Ethernet HWaddr 00:02:3F:7C:AC:CB
> inet addr:66.30.27.46 Bcast:255.255.255.255 Mask:255.255.248.0
> UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:7187105 errors:0 dropped:0 overruns:0 frame:0
> TX packets:55 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:100
> RX bytes:431229374 (411.2 MiB) TX bytes:10268 (10.0 KiB)
> Interrupt:11 Base address:0xd000
>
> How can I determine the reason behind the large disparity between
> RX and TX packets?

How are you using your eth0 connection? I would guess that you are
not running a web or ftp server, or sending much mail.



--
Not only do people continue to use the virus-magnet Outlook Express,
for protection they rely on antivirus software that can't detect a
forged "From:" address.

"J Krugman" <jill_krugman@yahoo.com> wrote in message
news:blsace$rqh$1@reader2.panix.com...
>
>
>
> Here's the output from ifconfig for eth0:
>
> $ sudo ifconfig eth0
> eth0 Link encap:Ethernet HWaddr 00:02:3F:7C:AC:CB
> inet addr:66.30.27.46 Bcast:255.255.255.255 Mask:255.255.248.0
> UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:7187105 errors:0 dropped:0 overruns:0 frame:0
> TX packets:55 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:100
> RX bytes:431229374 (411.2 MiB) TX bytes:10268 (10.0 KiB)
> Interrupt:11 Base address:0xd000
>
> How can I determine the reason behind the large disparity between
> RX and TX packets?


Do you think they should be equal ?

Do you think they should both be zero ???


Do you have any problem with the ethernet connectiong ? you havent used it
much, what happens if you use it ?



Because you havent used the interface, but there are a lot of packets
received, there are two guesses I can make,

1. if the computer was up for a very long time (week or more), maybe its
just the broadcasts off other computers.
2. if the computer wasnt up for such a long time, maybe its got a ethernet
sniffer running, and that put the etherent card into 'promiscuous mode' .
Its receiving every packet off the ethernet.




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.522 / Virus Database: 320 - Release Date: 29/09/2003