Ethereal-dev: [Ethereal-dev] Re: [Ethereal-users] pcap-linux

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 13 May 2005 13:24:09 -0700
rupesh gautam wrote:
we are analysing packet drop with buffer length on fedora............ and ethereal uses libpcap...

So do a lot of other programs; the best place to ask libpcap questions is tcpdump-workers@xxxxxxxxxxx (and ethereal-users isn't for development questions at all, so I'm replying only to ethereal-dev).

is there any way to change buffer length... is this true that pcap-bpf.c is for FreeBSD and pcap-linux.c for linux.

It's true the pcap-bpf.c is for systems using BPF (which includes FreeBSD, but also includes NetBSD, OpenBSD, DragonflyBSD, Mac OS X/Darwin, and AIX), and pcap-linux.c is for Linux.

On Linux, the "buffer length" would be the size of the socket receive buffer. Try using setsockopt() to set that.