Date: Mon, 11 Dec 2000 10:49:48 +0100 From: "Loris Degioanni" <loris@netgroup-serv.polito.it> To: "Stefan Esser" <se@FreeBSD.org>, "Guy Harris" <gharris@flashcom.net> Cc: "Matt Dillon" <dillon@earth.backplane.com>, "Dragos Ruiu" <dr@kyx.net>, <tcpdump-workers@tcpdump.org>, <ethereal-dev@ethereal.com>, <snort-devel@lists.sourceforge.net>, <freebsd-hackers@FreeBSD.org>, <tech@openbsd.org>, "Stefan Esser" <se@FreeBSD.org> Subject: R: [tcpdump-workers] Re: Re: [Ethereal-dev] Re: Fwd: kyxtech: freebsd outsniffed by wintendo !!?!? Message-ID: <004001c06358$37cc9480$016464c8@lorix> References: <0012072118150Q.09615@smp.kyx.net> <200012080547.eB85lKc17216@earth.backplane.com> <20001207233958.C352@quadrajet.flashcom.com> <20001208003839.A352@quadrajet.flashcom.com> <20001209142132.A822@StefanEsser.FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> On 2000-12-08 00:38 -0800, Guy Harris <gharris@flashcom.net> wrote: > > (Both FreeBSD and OpenBSD have the maximum buffer size for BPF as 512KB > > in the top of the CVS tree; NetBSD still has it as 32K.) > > You can change both the default and maximum BPF buffer sizes at > run time (affecting an subsequent open()) in FreeBSD: > > # sysctl -w debug.bpf_bufsize=32768 debug.bpf_maxbufsize=4194304 > > makes the default buffer size 32K and limits the size to 4MB, for > example. Notice however that in pcap-bpf.c, pcap_open_live() forces the buffer size to 32K through an IOCTL. This means that the sysctl is overridden if BPF is used throug libpcap. Loris. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004001c06358$37cc9480$016464c8>