From owner-freebsd-net@FreeBSD.ORG Thu Oct 2 01:18:43 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 674C716A4B3; Thu, 2 Oct 2003 01:18:43 -0700 (PDT) Received: from silver.he.iki.fi (helenius.fi [193.64.42.241]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7D7A943FEA; Thu, 2 Oct 2003 01:18:41 -0700 (PDT) (envelope-from pete@he.iki.fi) Received: from he.iki.fi (localhost [127.0.0.1]) by silver.he.iki.fi (8.12.9/8.11.4) with ESMTP id h928IcNn035533; Thu, 2 Oct 2003 11:18:39 +0300 (EEST) (envelope-from pete@he.iki.fi) Message-ID: <3F7BDF5E.9060704@he.iki.fi> Date: Thu, 02 Oct 2003 11:18:38 +0300 From: Petri Helenius User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.4) Gecko/20030923 X-Accept-Language: English [en],Finnish [fi] MIME-Version: 1.0 To: Bruce M Simpson References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <20030918014203.GA59403@k7.mavetju> <3F694D56.9040609@he.iki.fi> <20030918124311.GC3431@saboteur.dek.spc.org> <3F6A1CA9.5030701@he.iki.fi> <20030918210538.GB2720@saboteur.dek.spc.org> <3F6A2710.5090000@he.iki.fi> <20031001171158.GK13612@saboteur.dek.spc.org> <3F7B20E5.6010301@he.iki.fi> <20031002001920.GF660@saboteur.dek.spc.org> In-Reply-To: <20031002001920.GF660@saboteur.dek.spc.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org cc: Josh Brooks cc: fenner@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Oct 2003 08:18:43 -0000 Bruce M Simpson wrote: >ports would seem to be an acceptable halfway house, though, for people who >want to use pcap/tcpdump of a more recent vintage, than has been determined >to be suitable for a FreeBSD release. does it not? > > On general case, I agree with you. However libpcap does not change that often, tcpdump changes somewhat more often but the major issue here is that pcap is in direct conflict of FreeBSD release kernel code by breaking the bpf_bufsize and bpf_maxbufsize tunables from functioning. Pete