tcpdump mailing list archives

Re: Buffer size question


From: Guy Harris <guy () alum mit edu>
Date: Fri, 15 Oct 2004 14:46:09 -0700


On Oct 15, 2004, at 6:19 AM, Hannes Gredler wrote:

shouldn't we have upper/lower boundary checks for
such a buffer ?

i.e. minbuffer 1.5K
     maxbuffer 128K

I think the BPF kernel code in most of the BSDs already impose upper and lower bounds; are you suggesting that libpcap impose its own bounds?

Note also that other OSes might also have the notion of a settable buffer size, and perhaps the other pcap-*.c files should also check the PCAP_BUFSIZE environment variable. Those OSes might, or might not, impose their own upper and lower bounds.

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Current thread: