In some email I received from John Hawkinson, sie wrote: > Guy Harris <[EMAIL PROTECTED]> wrote on Tue, 20 Jul 2004 > at 23:21:17 -0700 in <[EMAIL PROTECTED]>: > > > 1) it defines DEFAULT_SNAPLEN as 96 unconditionally, rather > > than, as is done now, as 68 if INET6 isn't defined and as 96 > > if it is defined; > > > > The first seems OK to me, although some might find it a surprise. You > > can always use "-s 68" if you want 68 bytes. > > Won't this have unfortunate effects on performance (and possibly storage, > but that's less concerning) for some people in borderline situations?
Why don't you measure it and tell us all exactly how bad the degradation is ? Darren - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
