Date: Thu, 27 May 2004 17:22:23 +0300 From: Sergey Lyubka <devnull@uptsoft.com> To: freebsd-current@freebsd.org Subject: Re: 5.2.1 + snort, dropping packets Message-ID: <20040527172223.B17016@oasis.uptsoft.com> In-Reply-To: <FE045D4D9F7AED4CBFF1B3B813C85337051D8D2A@mail.sandvine.com>; from don@sandvine.com on Tue, May 25, 2004 at 09:12:04AM -0400 References: <FE045D4D9F7AED4CBFF1B3B813C85337051D8D2A@mail.sandvine.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> This might be old information, but on stable branch, libpcap > overrode the 'debug.bpf_bufsize' and always made it 4K. I made > a local change and it fixed it for me. Not sure if that is > corrected on current. > > On the system you indicate you should be able to get ~300Kpps > into user space via bpf, or at least, you can with stable. thanks for the hint! libpcap 0.8.3, which is already ported to -current, fixes this problem.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040527172223.B17016>