Wireshark-bugs: [Wireshark-bugs] [Bug 6025] What happened to the "-B" kernel buffer size option
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 15 Jun 2011 16:06:05 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6025

--- Comment #2 from Guy Harris <guy@xxxxxxxxxxxx> 2011-06-15 16:06:04 PDT ---
Did you build that on 10.5 or an older version of 10.6 without any developer
tools updates?  That's an *old* version of GCC:

    Built using gcc 4.0.1 (Apple Inc. build 5488).

The "with libpcap 1.1.1" is a little surprising, as if you built with 1.1.1 the
configure script should have found pcap_create() and used the new APIs that
support -B; however, *if* it's fetching the version number from the libpcap
dylib image, rather than having it built into the executable at the time it was
built, that might mean it was built with an older version lacking
pcap_create().

The fact that it's built 32-bit further suggests that it was built on 10.5,
which had a pre-1.0 libpcap that didn't support pcap_create() and thus didn't
support setting the buffer size.

The default buffer size with libpcap 1.1.1 is 512KB, so -B shouldn't be
necessary there - "-B 300000" might actually *reduce* the buffer size.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.