From owner-freebsd-hackers Sat Dec 9 18:48:57 2000 From owner-freebsd-hackers@FreeBSD.ORG Sat Dec 9 18:48:54 2000 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from lox.sandelman.ottawa.on.ca (lox.sandelman.ottawa.on.ca [209.151.24.2]) by hub.freebsd.org (Postfix) with ESMTP id 5D01537B401; Sat, 9 Dec 2000 18:48:53 -0800 (PST) Received: from sandelman.ottawa.on.ca (localhost [127.0.0.1]) by lox.sandelman.ottawa.on.ca (8.8.7/8.8.8) with ESMTP id WAA27058; Sat, 9 Dec 2000 22:17:08 -0500 (EST) Received: by sandelman.ottawa.on.ca (8.11.0/8.11.0) id eBA2Ee203226; Sat, 9 Dec 2000 21:14:40 -0500 (EST) Received: from sender.ngi.de (sender.ngi.de [212.79.47.18]) by lox.sandelman.ottawa.on.ca (8.8.7/8.8.8) with ESMTP id LAA20667 for ; Sat, 9 Dec 2000 11:26:33 -0500 (EST) Received: from Gatekeeper.FreeBSD.org (koln-3e3664ad.pool.mediaWays.net [62.54.100.173]) by sender.ngi.de (Postfix) with ESMTP id 0F7B696D4C; Sat, 9 Dec 2000 16:49:53 +0100 (CET) Received: from StefanEsser.FreeBSD.org (StefanEsser [10.0.0.1]) by Gatekeeper.FreeBSD.org (Postfix) with ESMTP id 5ED15C; Sat, 9 Dec 2000 14:20:55 +0100 (CET) Received: by StefanEsser.FreeBSD.org (Postfix, from userid 200) id 5DECDDAD; Sat, 9 Dec 2000 14:21:32 +0100 (CET) Date: Sat, 9 Dec 2000 14:21:32 +0100 From: Stefan Esser To: Guy Harris Cc: Matt Dillon , Dragos Ruiu , tcpdump-workers@tcpdump.org, ethereal-dev@ethereal.com, snort-devel@lists.sourceforge.net, freebsd-hackers@FreeBSD.org, tech@openbsd.org, Stefan Esser Subject: Re: Re: [Ethereal-dev] Re: Fwd: kyxtech: freebsd outsniffed by wintendo !!?!? Message-ID: <20001209142132.A822@StefanEsser.FreeBSD.org> Reply-To: Stefan Esser References: <0012072118150Q.09615@smp.kyx.net> <200012080547.eB85lKc17216@earth.backplane.com> <20001207233958.C352@quadrajet.flashcom.com> <20001208003839.A352@quadrajet.flashcom.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20001208003839.A352@quadrajet.flashcom.com>; from gharris@flashcom.net on Fri, Dec 08, 2000 at 12:38:39AM -0800 Sender: mcr@sandelman.ottawa.on.ca Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 2000-12-08 00:38 -0800, Guy Harris wrote: > (Both FreeBSD and OpenBSD have the maximum buffer size for BPF as 512KB > in the top of the CVS tree; NetBSD still has it as 32K.) You can change both the default and maximum BPF buffer sizes at run time (affecting an subsequent open()) in FreeBSD: # sysctl -w debug.bpf_bufsize=32768 debug.bpf_maxbufsize=4194304 makes the default buffer size 32K and limits the size to 4MB, for example. There were further changes to the BPF kernel code suggested by the NFR folks, which do not seem to have made it into FreeBSD, though. The original patches were for FreeBSD-2.2.x, I ported them to 3.x, but there have been many changes to bpf.c since then ... I can dig out the old patch and accompanying rationale, if anybody is interested, since it has been removed from the NFR download area. Regards, STefan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message