hi , What is the maximum kernel packet capture buffer size that can be used at the libpcap layer ?
I am referring to libpcap over OpenBSD 2.9 which uses bpf mechanism. I see that libpcap asks kernel for a buffer of 32768 and goes down exponentially. Is it possible to start for eg: from 65536 instead of 32768 so that we will get a bigger buffer thereby reducing possible packet drops during bursty traffic scenarios. or is it limited by the kernel capabilities ? thanks a lot ashley - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
