tcpdump mailing list archives

Re: capturing on both interfaces simultaneously


From: "David Laight" <David.Laight () ACULAB COM>
Date: Tue, 13 Dec 2011 10:50:35 -0000

On Dec 12, 2011, at 1:41 PM, Guy Harris wrote:

On Dec 12, 2011, at 3:59 AM, David Laight wrote:

I also think that interface could defer freeing the last
rx buffer until the request to read another packet.
That would avoid the necessity of a buffer copy
for applications that don't want to use callbacks.

Actually, that *might* be doable, with some additional 
complexity, although it does leave one less buffer slot 
available to the kernel...

Only until the application tries to read the next packet.
Which will be almost immediately it has finished processing it.

The V1/V2 header stuff looks like a badly fixed fubar!
If might be worth sorting out the correct offset for a
32bit access to sp_status! - needed for big-endian 64bit
systems.

        David


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: