From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 08:45:55 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1C98616A4B3 for ; Thu, 18 Sep 2003 08:45:55 -0700 (PDT) Received: from arginine.spc.org (arginine.spc.org [195.206.69.236]) by mx1.FreeBSD.org (Postfix) with ESMTP id D14F243FE9 for ; Thu, 18 Sep 2003 08:45:52 -0700 (PDT) (envelope-from bms@spc.org) Received: from localhost (localhost [127.0.0.1]) by arginine.spc.org (Postfix) with ESMTP id 10E796540E; Thu, 18 Sep 2003 16:45:52 +0100 (BST) Received: from arginine.spc.org ([127.0.0.1]) by localhost (arginine.spc.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 25496-03-4; Thu, 18 Sep 2003 16:45:51 +0100 (BST) Received: from saboteur.dek.spc.org (unknown [81.3.72.68]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by arginine.spc.org (Postfix) with ESMTP id DF54D65408; Thu, 18 Sep 2003 16:45:49 +0100 (BST) Received: by saboteur.dek.spc.org (Postfix, from userid 1001) id 03D76C5; Thu, 18 Sep 2003 13:43:11 +0100 (BST) Date: Thu, 18 Sep 2003 13:43:11 +0100 From: Bruce M Simpson To: Petri Helenius Message-ID: <20030918124311.GC3431@saboteur.dek.spc.org> Mail-Followup-To: Petri Helenius , Edwin Groothuis , freebsd-net@freebsd.org, Josh Brooks References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <20030918014203.GA59403@k7.mavetju> <3F694D56.9040609@he.iki.fi> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3F694D56.9040609@he.iki.fi> Organization: SPC cc: freebsd-net@freebsd.org cc: Josh Brooks Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 15:45:55 -0000 On Thu, Sep 18, 2003 at 09:14:46AM +0300, Petri Helenius wrote: > Sure, but because the bug in pcap-bpf.c there is no way to set the > buffer above 32768 > without recompiling the library after applying the patch. > > This bug should be fixed in the FreeBSD copy of libpcap because tcpdump > folks seem > to be quite dormant. We should avoid applying patches on the import if we possibly can, it's Not Right. I'd suggest submitting a patch via Sourceforge. I did this at Bill Fenner's suggestion for some protocol additions I'd made, and Guy Harris has been very good about closing and applying them, even if it takes him a week or two to get around to it as he is quite busy. BMS