Re: mac os x buffering packets?

[Guy Harris <guy () alum mit edu>]

On Aug 7, 2004, at 12:41 PM, Carter Bullard wrote:

>   On mac os x 10.3.4, using libpcap-0.8.3, opening pcap with
> pcap_open_live(dev, 96, 1, 1000, errbuf)  and reading packets with
> pcap_loop (pd, 1, callback, user), packets are queued until some
> magic number (looks to be 200) of packets is reached, and then I get
> them all.  This can take however long it takes for this threshold
> to be reached (I've waited an hour).

The attached test program, when compiled and run on OS X 10.3.4 with 
both the 0.8.3 that comes with OS X 10.3.4 (the version string for that 
version of libpcap is misleading - it's 0.8.3 in 10.3.4) and with 0.8.3 
compiled from the tcpdump.org source, doesn't wait for a large number 
of packets to arrive before printing that a packet arrived.

Is your test program doing something differently?

Attachment: testpcap.c
Description:

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.