Hi, i am trying to minimize the dropped packet count, which maybe due to a too small buffer in the BPF driver.
are there any bad implications of setting the BPF buffer size to 1meg and hardcoding pcap-bpf.c to use the buffer size of 1meg? [wasting kernel memory does not count.] thanks! -alexm 10:26 25/03/2005 - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
