On 22/09/11 16:27, Jon Schipp wrote: > Hey Chris, > > PCAP_NO_PF_RING is present in the strings output. I take it that it's not > using PF_RING?
Yes it is! That's an environment variable you can set if you want to disable PF_RING when using the PF_RING-enabled libpcap. It'll only be there if it was compiled with the latter. Best Wishes, Chris > On Thu, Sep 22, 2011 at 11:10 AM, Chris Wakelin > <[email protected]>wrote: > >> The PF_RING library gets statically linked into libpcap and tcpdump, I >> believe. Try "strings tcpdump" and see if you get things like >> "PCAP_NO_PF_RING" in it. -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, [email protected] IT Services Centre, The University of Reading, Tel: +44 (0)118 378 2908 Whiteknights, Reading, RG6 6AF, UK Fax: +44 (0)118 975 3094 _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
