Gentle people, Apologies if this a known problem. On mac os x 10.3.4, using libpcap-0.8.3, opening pcap with pcap_open_live(dev, 96, 1, 1000, errbuf) and reading packets with pcap_loop (pd, 1, callback, user), packets are queued until some magic number (looks to be 200) of packets is reached, and then I get them all. This can take however long it takes for this threshold to be reached (I've waited an hour).
Anything that can be done to get packets a little sooner? Carter - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
