Re: [tcpdump-workers] buffer size question

rupesh gautam wrote: why changing buffer size is unimplementable on systems with bpf. It's not *completely* unimplementable. It can, however, not be done after the BPF device has been bound to a network interface, which means that it cannot be done after "pcap_open_live()". I don't know why the

[tcpdump-workers] buffer size question

why changing buffer size is unimplementable on systems with bpf. and does packet drop depends upon packet filter??- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.