RE: PF_RING question

["Dennis Henderson" <hendo () hendohome com>]

> -----Original Message-----
> From: Milani Paolo [mailto:Paolo.Milani () TILAB COM] 
> Sent: Thursday, June 23, 2005 5:14 AM
> To: snort-users () lists sourceforge net; hendo () hendohome com
> Subject: RE: [Snort-users] PF_RING question
>
> Hi dennis,
>
> I think I can answer your question.
>
> The size of the buffers for packets in the ring buffer is set 
> as a module option when inserting the module, as an example:
>
> insmod ring.o bucket_len=1514
>
> See the readme in the kernel directory of the ring tar.gz for 
> info on other module options.
>
> User side options like tcpdump -s cannot make you sample more 
> data than has been made available kernel side.
>
> Paolo Milani



Your suggestion was spot on!

Thanks.  












 Snort-users mailing list
> Snort-users () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-users
>
>
> End of Snort-users Digest
>
>
>
>
> Gruppo Telecom Italia - Direzione e coordinamento di Telecom 
> Italia S.p.A.
>
> ====================================================================
> CONFIDENTIALITY NOTICE
> This message and its attachments are addressed solely to the 
> persons above and may contain confidential information. If 
> you have received the message in error, be informed that any 
> use of the content hereof is prohibited. Please return it 
> immediately to the sender and delete the message. Should you 
> have any questions, please send an e_mail to 
> MailAdmin () tilab com. Thank you 
> ====================================================================



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users