Jon
we have limited as with PF_RING 3.x the ring had fixed slices of "snaplen" thus having 64k was exhausting the memory pretty quickly. Probably with PF_RING 4.x/5.x this limit could be removed as slices have dynamic size

Luca

On 09/28/2011 04:08 AM, Jon Schipp wrote:
Hello all,

I'm was just curious to why the tcpdump application that comes with PF_RING has a maximum snap-length of 8192 bytes. Can this be changed? How would I do it? Recompile it with a specific option?

I'm getting ready to do some testing at work and I need to use the full 65535 bytes to test with my pre-PF_RING stats so I can see the differences.

Any help is appreciated,
Thanks
--
- Jon
--
------------------------------------------------------------------

VMB: 812-682-0231

Dubois County Linux User Group - http://www.dclinux.org
Southern Indiana Computer Klub - http://sickbits.networklabs.org
Bloomington FOOLS - http://www.bloomingtonfools.org/
BloomingLabs - http://www.bloominglabs.org
ISSA-Kentuckiana  - http://issa-kentuckiana.org

GPG Key ID: 810903CB
Key fingerprint = 0069 ED69 EABB DF84 5983  AD3C 6C20 BEFD 8109 03CB


_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to