Date: Fri, 13 Dec 2002 10:05:58 -0600 From: "Guy Helmer" <ghelmer@palisadesys.com> To: "Petri Helenius" <pete@he.iki.fi> Cc: <freebsd-net@FreeBSD.ORG> Subject: RE: libpcap Message-ID: <FPEBKMIFGFHCGLLKBLMMEEIBCBAA.ghelmer@palisadesys.com> In-Reply-To: <3DF9E78E.50001@he.iki.fi>
next in thread | previous in thread | raw e-mail | index | archive | help
Petri Helenius wrote: > Guy Helmer wrote: > >I use "sysctl debug.dbf_bufsize=131072" on my appliances to increase the > >BPF buffer size to something more reasonable without having to directly > >modify libpcap. > > > Hope you're not disappointed to find out that modifying that parameter has > no effect when using applications which use libpcap since libpcap always > sets the buffer size to 32768. (which is exactly the problem I'm complaining about) You are right - I misremembered how the BIOCSBLEN ioctl worked. My appliances do have a private copy of libpcap with a larger buffer size because of this problem. IMHO, it would be better for the libpcap code to query the default BPF buffer size (BIOCGLEN) and use it if it is larger than the libpcap default size (32768). Then libpcap would obey the buffer size set by the sysctl. Guy To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?FPEBKMIFGFHCGLLKBLMMEEIBCBAA.ghelmer>