Date: Thu, 28 Jun 2001 15:28:09 -0400 From: Bill Moran <wmoran@iowna.com> To: "'Heimes, Rene'" <rh@com-con.net>, "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org> Subject: RE: again: how to compile bpf... Message-ID: <01C0FFE6.F02B3BA0.wmoran@iowna.com>
next in thread | raw e-mail | index | archive | help
[this doesn't really belong on -hackers] Recompile the kernel. bpf is part of the kenel. If you're not familiar with kernel compiles, see the handbook. -Bill On Thursday, June 28, 2001 3:56 PM, Heimes, Rene [SMTP:rh@com-con.net] wrote: > I ?m using NeTraMet Vers. 4.3 on an FreeBSD 4.2 System (i386) > with libpcap-04. > > > NeTraMet uses libpcap for monitoring and get the packets on the LAN. > > It could be that ethernet packets were dropped by the kernel and > NeTraMet, which happens when i capture some minutes of the LAN traffic > with tcpdump 3.5 . > Tcpdump gives an information about how many packets were filtered and > how many packet were dropped by the kernel. > NeTraMet doesn?t do this. > How could i be on the secure site, that NeTraMet get all packets. > If NeTraMet droppes the packets like tcpdump what can I do. > > > In the newsforum from NeTraMet someone says to boost the bpf buffer but > he didn?t know how. > (the counter it is referring to in /sys/net/bpf.c in the kernel.) > seems to be > # define BPF_BUFSIZE 4096 > so i have to increase this. > And there for I have to recompile the c-source code, but which of the > source and how. > Where I have to put the binary?? > > > Could you help me or give some hints?? > > > Thanks in advance > > Rene Heimes > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01C0FFE6.F02B3BA0.wmoran>