[Bro-Dev] #447: Bro snaplen

Bro Tracker bro at tracker.icir.org
Sun May 1 16:34:07 PDT 2011


#447: Bro snaplen
---------------------+-----------------
 Reporter:  vern     |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:
Component:  Bro      |    Version:
 Keywords:           |
---------------------+-----------------
 PktSrc.cc sets snaplen to 8192.  That used to be ample to ensure full-
 packet capture, but isn't any longer for links with Jumbo frames.  It
 should be set to either 65535 or (better, if indeed generally supported),
 0, which says "entire packets please".

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/447>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list