Re: [tcpdump-workers] We're unable to process your request

2011-05-23 Thread jyoung
Details are in the attached document. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] pcap_inject and 802.1q subinterfaces on Solaris?

2011-05-23 Thread Darren Reed
On 23/05/11 10:16 AM, Tim Sammut wrote: On 05/20/2011 04:08 PM, Darren Reed wrote: Hi, Darren, thanks for the note. Are you using a virtual interface such as vnic0? Or does it have another name? The virtual interfaces appear as ce101002 and ce102002; the physical interface

Re: [tcpdump-workers] pcap_inject and 802.1q subinterfaces on Solaris?

2011-05-23 Thread Tim Sammut
On 05/20/2011 04:08 PM, Darren Reed wrote: > Hi, Darren, thanks for the note. > Are you using a virtual interface such as vnic0? > Or does it have another name? The virtual interfaces appear as ce101002 and ce102002; the physical interface is ce2. We're using the instructions at [1] to setup th

Re: [tcpdump-workers] libpcap capture performance drop

2011-05-23 Thread Guy Harris
On May 23, 2011, at 9:58 AM, Rick Jones wrote: > Are there alignment differences for the different buffer sizes? For > example, when one would use 1518, would one be better-off using 1520 to > end on a 4 byte boundary and so begin on a 4 byte boundary if these > buffers are carved one after the

Re: [tcpdump-workers] libpcap capture performance drop

2011-05-23 Thread Rick Jones
On Fri, 2011-05-20 at 12:02 -0700, Guy Harris wrote: > On Sep 6, 2010, at 11:45 AM, Doktor Bernd wrote: > > > If I recompile with the HAVE_PACKET_RING stuff *not* commented out I get > > the bad performance as with the packaged versions from Ubuntu. So the > > performance drop is caused by that

Re: [tcpdump-workers] *** glibc detected *** corrupted

2011-05-23 Thread Guy Morand
> -Original Message- > From: tcpdump-workers-ow...@lists.tcpdump.org [mailto:tcpdump-workers- > ow...@lists.tcpdump.org] On Behalf Of harish badrinath > Sent: vendredi 20 mai 2011 19:33 > To: tcpdump-workers@lists.tcpdump.org > Subject: Re: [tcpdump-workers] *** glibc detected *** corrupted

Re: [tcpdump-workers] libpcap capture performance drop

2011-05-23 Thread Guy Harris
On May 23, 2011, at 12:31 AM, ri...@happyleptic.org wrote: > Which brings the question: how one could find out the MTU of a > pcap_handle in order no to set caplen to 65535 ? See pcap-linux.c in the top of the trunk or of the 1.2 branch. (Short answer: SIOCGIFMTU, as in the iface_get_mtu() rou

Re: [tcpdump-workers] libpcap capture performance drop

2011-05-23 Thread rixed
-[ Fri, May 20, 2011 at 12:02:42PM -0700, Guy Harris ] > The packet-ring stuff has fixed-length slots, which means that the number of > slots is the buffer size divided by the size of the slots. Very interresting information! Which brings the question: how one could find out the MTU of a pca