bpf_bufsize - Increasing the FreeBSD default value for bpf buffer (used by tcpdump)

Date: Mon, 19 Apr 1999 16:02:25 -0400 (EDT)
From: Don Smith 
To: dirt@cs.unc.edu
Subject: TCPDUMP note from Vern Paxon

Bruce Mah writes:

> > However, if you're using FreeBSD out of the box, you're likely getting
> > burned by the completely undersized default kernel BPF buffers,
something
> > like 4 KB.  We crank them into the 1+ MB range.
> 
> Hmmm...interesting.  Is this what the debug.bpf_bufsize sysctl is for?

Yes, that's the one.






Date: Mon, 21 Feb 2000 14:44:21 -0500 (Eastern Standard Time)
From: Michele Clark 
To: mixxel@cs.unc.edu
Subject: increasing buffer size


In exp.script:

BPF_BUFSIZE=131072

# increase tcpdump buffer size
%{monitor}: sysctl -w debug.bpf_bufsize=%{BPF_BUFSIZE}


-Michele