Re: [tcpdump-workers] Performance impact with multiple pcap handlers on Linux

2020-12-22 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Dec 22, 2020, at 3:31 PM, Linus Lüssing wrote: > Basically we want to do live measurements of the overhead of the mesh > routing protocol and measure and dissect the layer 2 broadcast traffic. > To measure how much ARP, DHCP, ICMPv6 NS/NA/RS/RA, MDNS, LLDP overhead > etc.

Re: [tcpdump-workers] Performance impact with multiple pcap handlers on Linux

2020-12-22 Thread Linus Lüssing via tcpdump-workers
--- Begin Message --- On Tue, Dec 22, 2020 at 02:28:17PM -0800, Guy Harris wrote: > On Dec 22, 2020, at 2:05 PM, Linus Lüssing via tcpdump-workers > wrote: > > > I was experimenting a bit with migrating from the use of > > pcap_offline_filter() to pcap_setfilter(). > > > > I was a bit surprised

Re: [tcpdump-workers] Performance impact with multiple pcap handlers on Linux

2020-12-22 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Dec 22, 2020, at 2:05 PM, Linus Lüssing via tcpdump-workers wrote: > I was experimenting a bit with migrating from the use of > pcap_offline_filter() to pcap_setfilter(). > > I was a bit surprised that installing for instance 500 pcap > handlers What is a "pcap handler