what is the best value for PCAP_FRAMES?

[Jon Zhou <Jon.Zhou () jdsu com>]

Hi there:

The bigger PCAP_FRAMES or a smaller value will get a better performance?

I.e.

PCAP_FRAMES=max tcpdump -I eth0 -w /dev/null

Or

PCAP_FRAMES=4096 tcpdump .....

Thanks
jon
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.