tcpdump mailing list archives

Re: Capturing in 32 bit guests


From: Romain Francoise <rfrancoise () debian org>
Date: Wed, 01 Feb 2012 21:54:08 +0100

Guy Harris <guy () alum mit edu> writes:

so the mmap interface should work between a 64-bit kernel and 32-bit
userland *if* the kernel supports TPACKET_V2, as libpcap should choose
TPACKET_V2 rather than TPACKET_V1 if TPACKET_V2 is supported. I'd need
to know what version of the kernel is running on the system to determine
whether TPACKET_V2 is supported or not (I don't know which kernel
version first introduced it).

You need 2.6.27 to make it work (TPACKET_v2 + PACKET_RESERVE).

-- 
Romain Francoise <rfrancoise () debian org>
http://people.debian.org/~rfrancoise/
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: