From owner-freebsd-questions@FreeBSD.ORG Mon May 31 16:45:38 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E711F1065692 for ; Mon, 31 May 2010 16:45:38 +0000 (UTC) (envelope-from bonomi@mail.r-bonomi.com) Received: from mail.r-bonomi.com (ns2.r-bonomi.com [204.87.227.129]) by mx1.freebsd.org (Postfix) with ESMTP id A40FD8FC08 for ; Mon, 31 May 2010 16:45:38 +0000 (UTC) Received: (from bonomi@localhost) by mail.r-bonomi.com (8.14.3/rdb1) id o4VGjFL9001779 for freebsd-questions@freebsd.org; Mon, 31 May 2010 11:45:15 -0500 (CDT) Date: Mon, 31 May 2010 11:45:15 -0500 (CDT) From: Robert Bonomi Message-Id: <201005311645.o4VGjFL9001779@mail.r-bonomi.com> To: freebsd-questions@freebsd.org Subject: Re: tcpdump filter maximum number? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 May 2010 16:45:39 -0000 > From owner-freebsd-questions@freebsd.org Mon May 31 04:19:25 2010 > Date: Mon, 31 May 2010 12:17:32 +0300 > From: Omer Faruk Sen > To: FreeBSD > Subject: tcpdump filter maximum number? > > Hi, > > Is there any limit on writing filters on tcpdump? Or is there any? I > use FreeBSD as the operating system. Maybe this limit is not on > tcpdump but on bpf on FreeBSD that is why I have stated FreeBSD There are _always_ limits to anything. If nothing else, your filters are going to be limited by the number of open file descriptors. Not terribly helpful, I know, but if you explain more/better what you're trying to do, something more helpful may emerge.