On Apr 17, 2013, at 8:03 PM, abhinav narain <abhinavnarai...@gmail.com> wrote:
> The other fancy thing which I am doing is setting a SIGPROCMASK to capture > alarms > to get to a handler which writes into the file every x minute(and if the > table is full) What happens if you eliminate that (and any code paths that eliminating that breaks)? That seems to be the biggest difference between your code and tcpdump's code (both your program and tcpdump use pcap_loop() as their main loops). _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers