El mar., 8 oct. 2019 a las 18:16, Michael Richardson (<m...@sandelman.ca>) escribió: > So I'm hearing that on Linux we should support V2 and V3. > *That we continue to need V2 support from the kernel for immediate mode* > I think so, yes.
> (This has implications to the *kernel* people as to what they can rip out, > and we should try to find a plan going forward that reduces code for both of > us) > Well, they can rip out whatever they want, we would just be unable to support that on newer kernels. They are very unlikely tho, due to their policy of not breaking userspace (whenever possible). If I understand correctly, the current state of affairs is that TPACKET_V3 is unsuitable for immediate mode. I'll try to research a bit more on this in the next few days, but I'm inclined to believe you and Guy know better about it. We could try and work something out with the kernel bunch to make it suitable, but I don't think I know enough to push that forward by myself. Maybe (haven't checked) TPACKET_V4 can be used, but I think that's too recent to require from downstream to get immediate mode working. _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers