Hi there: The bigger PCAP_FRAMES or a smaller value will get a better performance?
I.e. PCAP_FRAMES=max tcpdump -I eth0 -w /dev/null Or PCAP_FRAMES=4096 tcpdump ..... Thanks jon - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
