[Bro-Dev] #553: Script variable to set pcap's buffer size

Bro Tracker bro at tracker.bro-ids.org
Thu Aug 11 12:59:19 PDT 2011

#553: Script variable to set pcap's buffer size
 Reporter:  gregor           |      Owner:
     Type:  Feature Request  |     Status:  new
 Priority:  Normal           |  Milestone:  Bro1.7
Component:  Bro              |    Version:  git/master
 Keywords:                   |
 Newer pcap versions have a pcap_set_buffer_size(). This call can be used
 to adjust the kernel level buffer size for captures. (E.g., Linux
 PF_RING's buffer size, which will be quite important if we start using
 64KB snaplen)

 It's supported for all platforms we care about (Linux, BPF-based OSes),
 but we probably want to make sure that it obsoletes the manual tuning

 (It might well be that one still has to manually increase the max buffer

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/553>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

More information about the bro-dev mailing list