Ticket #720 (closed Problem: fixed)
Fix problem with loss at low packet rate
| Reported by: | seth | Owned by: | jsiwek |
|---|---|---|---|
| Priority: | High | Milestone: | |
| Component: | Bro | Version: | |
| Keywords: | Cc: |
Description
Everyone that runs the 2.0 beta is having trouble with packet loss at very low volume. It seems to come from the default snaplength increase to 65535 and the inability with the old libpcap api to effectively increase the buffer size.
I don't know how to solve this problem yet, but we need to fix it very soon and it's a definite blocker for the release.
Change History
Note: See
TracTickets for help on using
tickets.
I think we should change this back to the old default and also add a new script-level variable snaplen to change (and may deprecate the -s option then).