[Bro-Dev] #447: Bro snaplen

William Jones jones at tacc.utexas.edu
Fri Jun 3 09:46:20 PDT 2011

I would like to see a method to set the snaplen.   I setting to 65534 to a ccommodate large segemtn offload in in the new 10 GigE nics.   

Bill Jones

-----Original Message-----
From: bro-dev-bounces at bro-ids.org [mailto:bro-dev-bounces at bro-ids.org] On Behalf Of Bro Tracker
Sent: Friday, June 03, 2011 11:07 AM
To: vern at icir.org
Cc: bro-dev at bro-ids.org
Subject: Re: [Bro-Dev] #447: Bro snaplen

#447: Bro snaplen
  Reporter:  vern     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:  Bro1.6
 Component:  Bro      |    Version:
Resolution:           |   Keywords:

Comment (by seth):

 On Jun 3, 2011, at 11:28 AM, Bro Tracker wrote:

 > If setting it to 0 doesn't work, does it make sense to at least set it
 > 65535 or at least 32KB or 16KB?

 Robin and I talked about making it a command line/script variable setting
 to make it similar to other tools.  We could then set it to some
 reasonable value by default but ultimately leave it up to the user.

Ticket URL: <http://tracker.bro-ids.org/bro/ticket/447#comment:5>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker

bro-dev mailing list
bro-dev at bro-ids.org

More information about the bro-dev mailing list