Thanks for updating me with the latest man page ;-) So if I understand correctly, on linux( 2.2.18) I cant be guaranteed to return from pcap_dispatch periodically. And the only way of returning after every so many seconds ( approx.) is to adjust the capture buffer size according to an expected rate and size of arriving packets ?
Joe > "pcap_dispatch()" processes "only one bufferful of > packets ... at a > time" (or, as the old man page says, i, and, on > Linux, a read from a > SOCK_PACKET or PF_PACKET socket (that being the > mechanism used for raw > packet capture on Linux) returns one count 'em one > packet. __________________________________________________ Do You Yahoo!? Make a great connection at Yahoo! Personals. http://personals.yahoo.com - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
