Wireshark-dev: Re: [Wireshark-dev] dumpcap -B options default.
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 27 Feb 2013 10:23:35 -0800
On Feb 27, 2013, at 9:01 AM, Anders Broman <anders.broman@xxxxxxxxxxxx> wrote:

> Looking in libpcap sources it seems like our default of 1 MB actually decreases the buffer if mmap is used, should the default be increased to 2MB to reflect libpcaps default

That's probably the best answer - on the platforms where libpcap can set the buffer size, if libpcap tries to set it to a larger size than is allowed, no error occurs, it's just silently clamped.