Re: [tcpdump-workers] pcap_dispatch on linux 2.6 with libpcap 1.1.1

2010-08-25 Thread Guy Harris
On Aug 23, 2010, at 3:54 PM, Jim Lloyd wrote: > What is the relationship between the socket receive buffer and the > mmap buffer? Does the mmap buffer replace the socket receive buffer, Yes. > I currently have my primary testing > machine configured with > > net.core.rmem_default = 4194304 > n

Re: [tcpdump-workers] pcap_dispatch on linux 2.6 with libpcap 1.1.1

2010-08-25 Thread Jim Lloyd
On Wed, Aug 25, 2010 at 2:14 AM, Guy Harris wrote: > > On Aug 23, 2010, at 3:54 PM, Jim Lloyd wrote: > > > What is the relationship between the socket receive buffer and the > > mmap buffer? Does the mmap buffer replace the socket receive buffer, > > Yes. > Cool. > > I currently have my primar