Re: NetBSD packet filter

[Emmanuel Nyarko <emmankoko519%gmail.com@localhost>]

On 26 Dec 2024, at 2:07 PM, Paul Goyette <paul%whooppee.com@localhost> wrote:

On Wed, 25 Dec 2024, Emmanuel Nyarko wrote:

I tested it and it works. Seem to check a data limit when copying into the kernel. So I’ll make that change

On 25 Dec 2024, at 12:53 PM, Sunil Nimmagadda <sunil%nimmagadda.net@localhost> wrote:

Emmanuel Nyarko <emmankoko519%gmail.com@localhost> wrote:

Sunil,
Has this(your solution to counter E2BIG) been integrated into the main tree?

It's not merged yet. NPF_IOCTL_DATA_LIMIT is still unchanged.

Could this be made as a sysctl variable?

Could it be changed at run-time?

I think that will be good. Introducing user control over the limit sounds good to me.

+---------------------+--------------------------+----------------------+
| Paul Goyette (.sig) | PGP Key fingerprint:     | E-mail addresses:    |
| (Retired)           | 1B11 1849 721C 56C8 F63A | paul%whooppee.com@localhost    |
| Software Developer  | 6E2E 05FD 15CE 9F2D 5102 | pgoyette%netbsd.org@localhost  |
| & Network Engineer  |                          | pgoyette99%gmail.com@localhost |
+---------------------+--------------------------+----------------------+

Emmanuel