On Mon, 21 Nov 2005 08:40:59 +0000 poncenby smythe <[EMAIL PROTECTED]> wrote:
> > On 20 Nov 2005, at 23:16, Damien Miller wrote: > > > On Sat, 19 Nov 2005, poncenby smythe wrote: > > > >> Dear list, > >> > >> Does anyone why the versions of tcpdump and libpcap in 3.8 GENERIC > >> (3.2(i think) and 0.5 respectively) are quite a way off from the > >> current stable releases (0.9.4). > > > > Exactly what do you want from the tcpdump.org version? > > I believe the tcpdump shipped with 3.8 GENERIC does not support the - > C switch (meaning chunk the captured data by a specified limit in > megabytes). Generally you are better off asking for specific features (such as this) - we don't blindly chase versions on software we integrate. > I am also conscious of the old version keeping up with the level of > traffic attempting to be captured, although this is assuming that > newer versions of libpcap/tcpdump have performance benefits. There are some bpf code optimiser improvements that haven't been merged yet but these probably don't make that much of a difference unless you have long and/or complex filter expressions. -d
