From owner-freebsd-questions Thu Jun 28 12:28:21 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail.the-i-pa.com (mail.the-i-pa.com [151.201.71.132]) by hub.freebsd.org (Postfix) with SMTP id AB38537B403 for ; Thu, 28 Jun 2001 12:28:17 -0700 (PDT) (envelope-from wmoran@iowna.com) Received: (qmail 38334 invoked from network); 28 Jun 2001 19:36:24 -0000 Received: from unknown (HELO geekland) (151.201.71.193) by mail.the-i-pa.com with SMTP; 28 Jun 2001 19:36:24 -0000 Received: by localhost with Microsoft MAPI; Thu, 28 Jun 2001 15:28:10 -0400 Message-ID: <01C0FFE6.F02B3BA0.wmoran@iowna.com> From: Bill Moran To: "'Heimes, Rene'" , "freebsd-questions@freebsd.org" Subject: RE: again: how to compile bpf... Date: Thu, 28 Jun 2001 15:28:09 -0400 X-Mailer: Microsoft Internet E-mail/MAPI - 8.0.0.4211 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG [this doesn't really belong on -hackers] Recompile the kernel. bpf is part of the kenel. If you're not familiar with kernel compiles, see the handbook. -Bill On Thursday, June 28, 2001 3:56 PM, Heimes, Rene [SMTP:rh@com-con.net] wrote: > I ?m using NeTraMet Vers. 4.3 on an FreeBSD 4.2 System (i386) > with libpcap-04. > > > NeTraMet uses libpcap for monitoring and get the packets on the LAN. > > It could be that ethernet packets were dropped by the kernel and > NeTraMet, which happens when i capture some minutes of the LAN traffic > with tcpdump 3.5 . > Tcpdump gives an information about how many packets were filtered and > how many packet were dropped by the kernel. > NeTraMet doesn?t do this. > How could i be on the secure site, that NeTraMet get all packets. > If NeTraMet droppes the packets like tcpdump what can I do. > > > In the newsforum from NeTraMet someone says to boost the bpf buffer but > he didn?t know how. > (the counter it is referring to in /sys/net/bpf.c in the kernel.) > seems to be > # define BPF_BUFSIZE 4096 > so i have to increase this. > And there for I have to recompile the c-source code, but which of the > source and how. > Where I have to put the binary?? > > > Could you help me or give some hints?? > > > Thanks in advance > > Rene Heimes > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message