Paul Schmehl wrote:
Chuck Swiger wrote:
Check sysctl debug.bpf_bufsize, but also do a search on this because
there may be a patch needed for PCAP in order for buffers larger than
32K to actually work. [1]
Hmmm
sysctl debug.bpf_bufsize
sysctl: unknown oid 'debug.bpf_bufsize'
This sys
Chuck Swiger wrote:
Check sysctl debug.bpf_bufsize, but also do a search on this because
there may be a patch needed for PCAP in order for buffers larger than
32K to actually work. [1]
Hmmm
sysctl debug.bpf_bufsize
sysctl: unknown oid 'debug.bpf_bufsize'
sysctl -a | grep bufsize
net.b
Paul Schmehl wrote:
I'm fiddling around with ntop, but, after an initial packet capture, it
doesn't capture any more traffic. It claims that libpcap is dropping
all the packets.
If I run tcpdump like this:
tcpdump -i
I get this:
15 packets captured
51104 packets received by filter
50288 p
