Re: [tcpdump-workers] buffering packets with libpcap 1.0.0

2009-10-24 Thread Guy Harris
On Oct 24, 2009, at 8:53 AM, Virgil Mihailovici wrote: Thanks a lot for your reply. I understand the fact that I am going to consume kernel memory to buffer packets, but can I keep the buffer in use and the let the app free it? Like set the status to TP_STATUS_KERNEL when app is done with

Re: [tcpdump-workers] buffering packets with libpcap 1.0.0

2009-10-24 Thread Virgil Mihailovici
Thanks a lot for your reply. I understand the fact that I am going to consume kernel memory to buffer packets, but can I keep the buffer in use and the let the app free it? Like set the status to TP_STATUS_KERNEL when app is done with it? Would that work? Is there a way to do that (get a ho

Re: [tcpdump-workers] buffering packets with libpcap 1.0.0

2009-10-23 Thread Guy Harris
On Oct 23, 2009, at 5:09 PM, Virgil Mihailovici wrote: I have a couple of questions: 1. I am trying to change the size of the ring buffer allocated by pcap, it seems that I have to use pcap_set_buffer_size to do that. The question is, can I call this as a user, You can have your applicat

[tcpdump-workers] buffering packets with libpcap 1.0.0

2009-10-23 Thread Virgil Mihailovici
Hi, I'm new over here, please excuse if this is not the right forum. I am compiling libpcap 1.0.0 and I am trying to use the zero copy functionality. My application requires that packets are buffered for a period of time, then released. I have a couple of questions: 1. I am trying to change the s