[tcpdump-workers] Custom decoding offset? (for batman-adv)

2020-11-06 Thread Linus Lüssing via tcpdump-workers
--- Begin Message --- Hi! I would like to use tcpdump and libpcap to filter and examine batman-adv packets. batman-adv is a mesh routing protocol which encapsulates layer 2 ethernet frames. I know my way to identify batman-adv packets via raw ether filters. What I would like to additionally do is

Re: [tcpdump-workers] Custom decoding offset? (for batman-adv)

2020-11-16 Thread Linus Lüssing via tcpdump-workers
--- Begin Message --- On Fri, Nov 06, 2020 at 02:36:13PM +, Denis Ovsienko via tcpdump-workers wrote: > Date: Fri, 6 Nov 2020 14:36:13 + > From: Denis Ovsienko > To: Linus Lüssing via tcpdump-workers > Subject: Re: [tcpdump-workers] Custom decoding offset? (fo

[tcpdump-workers] Performance impact with multiple pcap handlers on Linux

2020-12-22 Thread Linus Lüssing via tcpdump-workers
--- Begin Message --- Hi, I was experimenting a bit with migrating from the use of pcap_offline_filter() to pcap_setfilter(). I was a bit surprised that installing for instance 500 pcap handlers with a BPF rule "arp" via pcap_setfilter() reduced the TCP performance of iperf3 over veth interfaces

Re: [tcpdump-workers] Performance impact with multiple pcap handlers on Linux

2020-12-22 Thread Linus Lüssing via tcpdump-workers
--- Begin Message --- On Tue, Dec 22, 2020 at 02:28:17PM -0800, Guy Harris wrote: > On Dec 22, 2020, at 2:05 PM, Linus Lüssing via tcpdump-workers > wrote: > > > I was experimenting a bit with migrating from the use of > > pcap_offline_filter() to pcap_setfilter().