On 13/09/12 18:30, Cabeza de Baca, Matthew wrote:
My current BPF filter is 1,151 characters with no spaces and 1037
characters with spaces. If I add one more exclude, even changing :
!(port 137) to !(port 137,53) the entire filter stops working.
Sounds like the limit is 1024 + 128 = 1152. Do you get any errors in the
log when your BPF is too large?
I'm no C or Ntop codebase expert, but I think the bit of the code that
is of interest is in util.c around line 1532.
alexd
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
