From owner-freebsd-hackers  Mon Dec 11 14:24:32 2000
From owner-freebsd-hackers@FreeBSD.ORG  Mon Dec 11 14:24:27 2000
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from sender.ngi.de (sender.ngi.de [212.79.47.18])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8974D37B404; Mon, 11 Dec 2000 14:24:26 -0800 (PST)
Received: from Gatekeeper.FreeBSD.org (koln-3e366425.pool.mediaWays.net [62.54.100.37])
	by sender.ngi.de (Postfix) with ESMTP
	id 49CA896E53; Mon, 11 Dec 2000 23:16:34 +0100 (CET)
Received: from StefanEsser.FreeBSD.org (StefanEsser [10.0.0.1])
	by Gatekeeper.FreeBSD.org (Postfix) with ESMTP
	id 6B38320; Mon, 11 Dec 2000 22:43:48 +0100 (CET)
Received: by StefanEsser.FreeBSD.org (Postfix, from userid 200)
	id 41F93145C; Mon, 11 Dec 2000 22:44:28 +0100 (CET)
Date: Mon, 11 Dec 2000 22:44:28 +0100
From: Stefan Esser <se@freebsd.org>
To: Loris Degioanni <loris@netgroup-serv.polito.it>
Cc: Guy Harris <gharris@flashcom.net>,
	Matt Dillon <dillon@earth.backplane.com>, Dragos Ruiu <dr@kyx.net>,
	tcpdump-workers@tcpdump.org, ethereal-dev@ethereal.com,
	snort-devel@lists.sourceforge.net, freebsd-hackers@FreeBSD.org,
	tech@openbsd.org, Stefan Esser <se@freebsd.org>
Subject: Re: R: [tcpdump-workers] Re: Re: [Ethereal-dev] Re: Fwd: kyxtech: freebsd outsniffed by wintendo !!?!?
Message-ID: <20001211224428.A73017@StefanEsser.FreeBSD.org>
Reply-To: Stefan Esser <se@freebsd.org>
References: <0012072118150Q.09615@smp.kyx.net> <200012080547.eB85lKc17216@earth.backplane.com> <20001207233958.C352@quadrajet.flashcom.com> <20001208003839.A352@quadrajet.flashcom.com> <20001209142132.A822@StefanEsser.FreeBSD.org> <004001c06358$37cc9480$016464c8@lorix>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <004001c06358$37cc9480$016464c8@lorix>; from loris@netgroup-serv.polito.it on Mon, Dec 11, 2000 at 10:49:48AM +0100
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On 2000-12-11 10:49 +0100, Loris Degioanni <loris@netgroup-serv.polito.it> wrote:
> > # sysctl -w debug.bpf_bufsize=32768 debug.bpf_maxbufsize=4194304
> >
> > makes the default buffer size 32K and limits the size to 4MB, for
> > example.
> 
> Notice however that in pcap-bpf.c, pcap_open_live()  forces the buffer
> size to 32K through an IOCTL. This means that the sysctl is overridden
> if BPF is used throug libpcap.

Yes, you are of course correct mentioning that !

The override used to up the buffer size from the kernel default of 4KB to
32KB, but now that the default has become 32KB, we probably should use the
default as is and leave the user the option of choosing a different default
by means of sysctl ...

Regards, STefan


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message