[tcpdump-workers] filter packets bound for company proxy server? (libpcap)

2010-08-15 Thread Greg Hauptmann
Hi, Can I ask if anyone has a good idea for how I could identify (filter packets) that are transiting via a company proxy server [e.g. proxy.mycompany.com]. The challenge here is that the DNS server will issue any one of a number of IP addresses back to the browser to use, associated with the ra

Re: [tcpdump-workers] libpcap capture performance drop

2010-08-15 Thread Guy Harris
On Aug 15, 2010, at 6:15 AM, Doktor Bernd wrote: > thanks for the advice. If I use libpcap 1.1.1 compiled with the > HAVE_PACKET_RING stuff commented out, the my softare performs very well. > Ubuntu currently ships with 1.0.0.6 I think. If I use that version my > application has problems captur

Re: [tcpdump-workers] libpcap capture performance drop

2010-08-15 Thread Doktor Bernd
Hi, thanks for the advice. If I use libpcap 1.1.1 compiled with the HAVE_PACKET_RING stuff commented out, the my softare performs very well. Ubuntu currently ships with 1.0.0.6 I think. If I use that version my application has problems capturing 100 Mbit/s of traffic. If I change to the custom