Re: [tcpdump-workers] mac os x buffering packets?

2004-08-09 Thread Guy Harris
On Aug 7, 2004, at 12:41 PM, Carter Bullard wrote: On mac os x 10.3.4, using libpcap-0.8.3, opening pcap with pcap_open_live(dev, 96, 1, 1000, errbuf) and reading packets with pcap_loop (pd, 1, callback, user), packets are queued until some magic number (looks to be 200) of packets is reached, a

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-09 Thread Loris Degioanni
Fulvio, Darren > > > > > Is the JIT code easily ported to other platforms ? > > > > > > Yes, as far as the platform is Intel ;-) > > > > That's fine with me :) > > Do you have a URL for this ? > > http://winpcap.polito.it > You'll find everything in the source pack. > Cheers, As Fulvio said, the

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-09 Thread Fulvio Risso
Hi Darren. > -Original Message- > From: Darren Reed [mailto:[EMAIL PROTECTED] > Sent: lunedi 9 agosto 2004 12.21 > To: Fulvio Risso > Cc: [EMAIL PROTECTED] > Subject: Re: [tcpdump-workers] advice for heavy traffic capturing > > > Hi Fulvio, > > > Fulvio Risso, Loris Degioanni, An Architect

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-09 Thread Darren Reed
Hi Fulvio, > Fulvio Risso, Loris Degioanni, An Architecture for High Performance Network > Analysis, Proceedings of the 6th IEEE Symposium on Computers and > Communications (ISCC 2001), pg. 686-693, Hammamet, Tunisia, July 2001. Is there any way you can get this (and the other date info.) into th

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-09 Thread Fulvio Risso
Hi Darren. > -Original Message- > From: Darren Reed [mailto:[EMAIL PROTECTED] > Sent: lunedi 9 agosto 2004 10.57 > To: Fulvio Risso > Cc: [EMAIL PROTECTED] > Subject: Re: [tcpdump-workers] advice for heavy traffic capturing > > > [ Charset ISO-8859-1 unsupported, converting... ] > > http

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-09 Thread Darren Reed
[ Charset ISO-8859-1 unsupported, converting... ] > http://netgroup.polito.it/fulvio.risso/pubs/iscc01-wpcap.pdf When was it published? There is no date... Winpcap appears, by design, to be the same as BPF. If you reduced the number of buffers in the ring used with NPF to 2 buffers, I suspect

Re: [tcpdump-workers] regarding tcpdum and tcpflow

2004-08-09 Thread nitin.sn
Please frame your question properly. Nitin Shantaram Nikam Software Engineer RedPine Signals Inc., Sagar Society, Road No.2, Banjara Hills, Hyderabad- 34,India off phone: 91-40-23550722 [EMAIL PROTECTED] res phone: 91-40-24220566

[tcpdump-workers] regarding tcpdum and tcpflow

2004-08-09 Thread neha agrawal
hello , i am making tcpflow read from tcpdump trace file for capturing packets on port 25 by sendind mail on same machine using sendmail and sending some word document as attachment. the file generated by tcpflow as some unwanted control characters which eats up some information of base 64

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-09 Thread Fulvio Risso
Hi Darren. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Darren Reed > Sent: domenica 8 agosto 2004 17.09 > To: [EMAIL PROTECTED] > Subject: Re: [tcpdump-workers] advice for heavy traffic capturing > > > In some email I received from Fulvio Risso, sie