> I'll download one of the nightly tars and try out the
> environment variable idea.
Here's my simple patch to allow an environment variable
PCAP_BUFSIZE to override the default initial buffer size.
--- pcap-bpf.c Tue Oct 5 03:23:39 2004
+++ pcap-bpf.c.new Thu Oct 14 14:21:41 2004
@@ -578
> > ...like pcap_setbuff(), as implemented in WinPcap...
>
> ...and which I already know about.
...and also, which I mentioned in my original email:
Basically provide the same functionality as pcap_setbuff
from winpcap, but it has to be called before opening the bpf dev.
> or an environ
Gianluca Varenni wrote:
...like pcap_setbuff(), as implemented in WinPcap...
...and which I already know about.
Unfortunately, given that, on systems with BPF, you cannot change the
buffer size after a BPF device has been bound to a network interface,
"pcap_setbuff()" is unimplementable on those
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 14, 2004 1:45 AM
Subject: Re: [tcpdump-workers] Buffer size question
> Ed Maste wrote:
>
> > 1) Add a new pcap API function pcap_set_bufsize that can be used
> > to set the size u
