Re: pcap_setbuf not available in linux

[Fabian Schneider <schneifa () net in tum de>]

Hi Ritesh,
> 1.       In this I want to set the kernel buffer for pcap driver, for this
> function pcap_setbuff is not available, but this same function is available
> in windows. So how we can set the pcap driver packet queue kernel buffer in
> linux? Is their any way through which we can include the  pcap_setbuff call,
> if not what is workaround?
>   
please note first that the winpcap and libpcap are two independent 
projects. Furthermore winpcap has a fairly easy job to support kernel 
level changes since the Windows Kernel API does not change dramatically 
and can be tracked over several different version of Windows. Whereas 
libpcap support almost all types of *NIX'es and Linux'es. The problem 
here is that not all of the supported OS'ses have kernel buffers to 
tune, and more important every OS has it own way to deal with packets in 
kernel. Therefore the procedures to change the in-kernel buffers are 
significantly different as well.

For changing the kernel-buffers in FreeBSD and Linux I want to point you 
to our website which gives some hints on increasing the capturing 
performance:
www.net.t-labs.tu-berlin.de/research/hppc/. If you are furthermore 
interested in understanding how the kernel part of capturing in FreeBSD 
and Linux works feel free to read any of the cited literature on the 
upon mentioned site.

Regarding your second question i would have to look it up. Maybe there 
is another one on this list who can answer your question straight away.


best
Fabian


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.