[Bro-Dev] #553: Script variable to set pcap's buffer size

[Bro Tracker]

#553: Script variable to set pcap's buffer size
-----------------------------+------------------------
 Reporter:  gregor           |      Owner:
     Type:  Feature Request  |     Status:  new
 Priority:  Normal           |  Milestone:  Bro1.7
Component:  Bro              |    Version:  git/master
 Keywords:                   |
-----------------------------+------------------------
 Newer pcap versions have a pcap_set_buffer_size(). This call can be used
 to adjust the kernel level buffer size for captures. (E.g., Linux
 PF_RING's buffer size, which will be quite important if we start using
 64KB snaplen)

 It's supported for all platforms we care about (Linux, BPF-based OSes),
 but we probably want to make sure that it obsoletes the manual tuning
 through:
 http://www.net.t-labs.tu-berlin.de/research/bpcs/

 (It might well be that one still has to manually increase the max buffer
 sizes)

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/553>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker