[Bro-Dev] #447: Bro snaplen

William Jones jones at tacc.utexas.edu
Fri Jun 3 09:46:20 PDT 2011


I would like to see a method to set the snaplen.   I setting to 65534 to a ccommodate large segemtn offload in in the new 10 GigE nics.   

Bill Jones

-----Original Message-----
From: bro-dev-bounces at bro-ids.org [mailto:bro-dev-bounces at bro-ids.org] On Behalf Of Bro Tracker
Sent: Friday, June 03, 2011 11:07 AM
To: vern at icir.org
Cc: bro-dev at bro-ids.org
Subject: Re: [Bro-Dev] #447: Bro snaplen

#447: Bro snaplen
----------------------+--------------------
  Reporter:  vern     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro1.6
 Component:  Bro      |    Version:
Resolution:           |   Keywords:
----------------------+--------------------

Comment (by seth):

 On Jun 3, 2011, at 11:28 AM, Bro Tracker wrote:

 > If setting it to 0 doesn't work, does it make sense to at least set it
 to
 > 65535 or at least 32KB or 16KB?


 Robin and I talked about making it a command line/script variable setting
 to make it similar to other tools.  We could then set it to some
 reasonable value by default but ultimately leave it up to the user.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/447#comment:5>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

_______________________________________________
bro-dev mailing list
bro-dev at bro-ids.org
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev



More information about the bro-dev mailing list