---
title: seq_num
framework: endpointsecurity
role: symbol
role_heading: Instance Property
path: endpointsecurity/es_message_t/seq_num
---

# seq_num

The sequence number of the message.

## Declaration

```swift
var seq_num: UInt64
```

## Discussion

Discussion Inspect the sequence number per-client and per-event-type to detect whether the kernel had to drop events for this client. If the kernel doesn’t drop any events for this client, seq_num increments by 1 for every message of that event type. To determine whether the kernel dropped events, compare the previous value of seq_num for this event type to the value received in the latest message. When the kernel drops no events, the difference is 1, since the current message increments the counter. You can therefore calculate the number of dropped messages as follows: numberOfDroppedEvents = thisMessage.seq_num - (prevMessage.seq_num + 1) Dropped events generally indicate that the kernel generated more events than the client could handle. This field is available if the message version is greater than 2. tip: For an equivalent counter that filters only by client and not event type, see global_seq_num.

## See Also

### Inspecting Timing Properties

- [time](endpointsecurity/es_message_t/time.md)
- [mach_time](endpointsecurity/es_message_t/mach_time.md)
- [deadline](endpointsecurity/es_message_t/deadline.md)
- [global_seq_num](endpointsecurity/es_message_t/global_seq_num.md)