Guy
I apologize for the late response.
I have considered your suggestion to move pfring into a pcap-pfring.*
file. I think that it's better to leave it into pcap-linux.c as moving
to a separate file would reduce the number of #ifdefs into pcap-
linux.c but this will require some pcap-linux.
How many processors do you have, are interrupts from each NIC going to
seperate processors/cores/whatever (show us the output of
/proc/interrupts), and have you bound each tcpdump to its corresponding
NICs interrupt CPU?
rick jones
-
This is the tcpdump-workers list.
Visit https://cod.sandelma
Hi,
we try to build a capture daemon using pcap lib. It does work great on a
single NIC if running alone, but if started twice on different NICs (eth0
& eth1) it seems that somehow they interfere in such way that capturing is
slowing down and pcap_stat does report dropped packets.
The same
