Subject: Re: packet capturing
To: Jonathan Stone <jonathan@DSG.Stanford.EDU>
From: Perry E. Metzger <>
List: tech-kern
Date: 01/20/2004 17:42:04
Jonathan Stone <jonathan@DSG.Stanford.EDU> writes:
> We could make bpf_bufsize sysctl'able; or raise the default to
> something that reduces bpf drop at high packet rate (somewhere between
> 128 and 512k); or both.
> Which of these would you support?

Both. The default probably should be jacked up only on larger memory
machines though (which is an easy calculation during boot...)

Perry E. Metzger