Date: Sat, 9 Dec 2000 14:21:32 +0100 From: Stefan Esser <se@FreeBSD.org> To: Guy Harris <gharris@flashcom.net> Cc: Matt Dillon <dillon@earth.backplane.com>, Dragos Ruiu <dr@kyx.net>, tcpdump-workers@tcpdump.org, ethereal-dev@ethereal.com, snort-devel@lists.sourceforge.net, freebsd-hackers@FreeBSD.org, tech@openbsd.org, Stefan Esser <se@FreeBSD.org> Subject: Re: Re: [Ethereal-dev] Re: Fwd: kyxtech: freebsd outsniffed by wintendo !!?!? Message-ID: <20001209142132.A822@StefanEsser.FreeBSD.org> In-Reply-To: <20001208003839.A352@quadrajet.flashcom.com>; from gharris@flashcom.net on Fri, Dec 08, 2000 at 12:38:39AM -0800 References: <0012072118150Q.09615@smp.kyx.net> <200012080547.eB85lKc17216@earth.backplane.com> <20001207233958.C352@quadrajet.flashcom.com> <20001208003839.A352@quadrajet.flashcom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2000-12-08 00:38 -0800, Guy Harris <gharris@flashcom.net> wrote: > (Both FreeBSD and OpenBSD have the maximum buffer size for BPF as 512KB > in the top of the CVS tree; NetBSD still has it as 32K.) You can change both the default and maximum BPF buffer sizes at run time (affecting an subsequent open()) in FreeBSD: # sysctl -w debug.bpf_bufsize=32768 debug.bpf_maxbufsize=4194304 makes the default buffer size 32K and limits the size to 4MB, for example. There were further changes to the BPF kernel code suggested by the NFR folks, which do not seem to have made it into FreeBSD, though. The original patches were for FreeBSD-2.2.x, I ported them to 3.x, but there have been many changes to bpf.c since then ... I can dig out the old patch and accompanying rationale, if anybody is interested, since it has been removed from the NFR download area. Regards, STefan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001209142132.A822>