Re: [tcpdump-workers] HUGE packet-drop

2011-01-24 Thread Cedric Cellier
Quick guess : maybe you build a custom kernel without the option to enable mmap sharing of packets with userland ? - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Obtaining interface IP address and MAC address

2011-01-24 Thread Guy Harris
On Jan 24, 2011, at 5:56 PM, Darren Reed wrote: > Why should it need to? > > The interfaces used to do both of the above are almost universal now: > SIOCGIFADDR and SIOCGIFHWADDR. So I can do those ioctls on Windows? Google says, for what it's worth: Your search - SIOCGIFADDR site:ms

Re: [tcpdump-workers] Obtaining interface IP address and MAC address

2011-01-24 Thread Darren Reed
roy hills wrote: I maintain an application that uses libpcap to receive frames, and uses its own link-specific functions to obtain interface details and send frames. I currently support packet socket (Linux), BPF (BSD) and DLPI (Solaris). I'd like to use libpcap to send as well as receive fra

Re: [tcpdump-workers] Obtaining interface IP address and MAC address with libpcap

2011-01-24 Thread Guy Harris
On Jan 24, 2011, at 3:49 AM, roy hills wrote: > Does libpcap allow me to get the interface IP address Yes - use pcap_findalldevs() and look for the interface in question; note, however, that you really mean "the interface's IP addresses", plural, as an interface could have more than one IPv4 a

Re: [tcpdump-workers] HUGE packet-drop

2011-01-24 Thread Rick Jones
The best way I found to do this was to have the application that is receiving the packets running on the same cores that the kernel is pulling them off the nic. Since my machine had two chips each with 4-6 cores (8-12 logical cores), I limited my application to run on the same chip as the nic was

Re: [tcpdump-workers] HUGE packet-drop

2011-01-24 Thread Cedric Cellier
Maybe you use a custom kernel lacking the option to enable mmap sharing of packets from kernel to userland ? - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] HUGE packet-drop

2011-01-24 Thread Gabe Black
Just some ideas to help. I have an application that is trying to capture, modify, resequence, and route very small packets. The configuration I found the best is the following (for kernel parameters): sysctl -w net.core.wmem_max=1310710 sysctl -w net.core.rmem_max=1310710 sysctl -w net.core.wm

[tcpdump-workers] new hardware integration to libpcap/wireshark

2011-01-24 Thread Jens Grimmer
Hi Michael, Hi Guy, I found your answer to my mail in the tcpdump mailing list. Thank you very much! I will submit the patches with my enhancements as soon as possible. Yes, its right, our packet data begins with a pseudo-header. For sure I will provide you with a documentation for the pseu

[tcpdump-workers] Obtaining interface IP address and MAC address with libpcap

2011-01-24 Thread roy hills
I maintain an application that uses libpcap to receive frames, and uses its own link-specific functions to obtain interface details and send frames. I currently support packet socket (Linux), BPF (BSD) and DLPI (Solaris). I'd like to use libpcap to send as well as receive frames, and notice th