Re: [tcpdump-workers] buffering packets with libpcap 1.0.0

2009-10-23 Thread Guy Harris
On Oct 23, 2009, at 5:09 PM, Virgil Mihailovici wrote: I have a couple of questions: 1. I am trying to change the size of the ring buffer allocated by pcap, it seems that I have to use pcap_set_buffer_size to do that. The question is, can I call this as a user, You can have your applicat

[tcpdump-workers] buffering packets with libpcap 1.0.0

2009-10-23 Thread Virgil Mihailovici
Hi, I'm new over here, please excuse if this is not the right forum. I am compiling libpcap 1.0.0 and I am trying to use the zero copy functionality. My application requires that packets are buffered for a period of time, then released. I have a couple of questions: 1. I am trying to change the s

Re: [tcpdump-workers] tcpslice when first file not used [PATCH]

2009-10-23 Thread Michael Richardson
Concerning tcpslice I asked Paul if he could pull it into a git repo... I then went back to my email, and remembered that mouse wrote an inverse program that he emailed to me last week, which due to lack of any name, I'll call pcapmerge. (it merges pcap files based upon time stamps) I'm thin

Re: [tcpdump-workers] tcpslice when first file not used [PATCH]

2009-10-23 Thread Alexander Dupuy
Hi Paul, I wrote: Also, looking at the source code, there appears to be an omission in the error() function call in the pcap_dump_open failure case - the third parameter (pcap_geterr call) seems not to be used (This is a pre-existing bug that just happens to be in the vicinity of your change).