On Sun, Oct 15, 2006 at 07:35:36PM +0200, Paolo Abeni wrote:
> p.s. the gettimeofday syscall give some overhead to the sniffing code,
> but currently the text interface provided by the kernel is IMHO the real
> bottleneck.
Could you post a kernel-patch that fixes the worst problems with the
interfaces without breaking libpcap? I'm thinking of the timestamp
problem and the incomplete captures - so in case I want a complete
capture or better timestamps I could just apply your patch and rebuild
the kernel?
thanks
Joerg
PS: OK, the timestamps have already been worked around and might not be
doable withouth breaking the ABI but the capture thing should.
--
Joerg Mayer <[EMAIL PROTECTED]>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
