Re: ipintrq

2003-09-18 Thread Bruce M Simpson
[Cc'd to -net instead as poss. OT for -current] On Thu, Sep 18, 2003 at 07:29:48PM -0600, Vector wrote: > What happened to ipintrq? I know it is now defined in ip_input.c...problem [snip] Try using netisr_dispatch() to hand-off an mbuf to the network stack instead. Look at the differences betwee

Re: Traffic analysis ports?

2003-09-18 Thread Josef Karthauser
On Thu, Sep 18, 2003 at 02:14:23PM -0400, Robert Watson wrote: > > On Thu, 18 Sep 2003, Josef Karthauser wrote: > > > I'm looking for some software to basically analyse the traffic I've got > > going over a particular pipe so that I can work out whether or what to > > traffic shape. Can anyone r

Re: I would like to tcpdump and get all the packets...

2003-09-18 Thread Petri Helenius
Don Bowman wrote: I found that increasing the bpf buffer size in libpcap to 256K from the default of 4K made a tremendous difference. We generally use sizes from 512k to 8M depending on network interface and hardware configuration. Used to do larger but run into some issues with KVM allocations

RE: I would like to tcpdump and get all the packets...

2003-09-18 Thread Don Bowman
From: Petri Helenius [mailto:[EMAIL PROTECTED] > Bruce M Simpson wrote: > > >Er, if you check this URL: > >http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/tcpdump/CHANGES > > > >Shurely you mean tcpdump 3.7.2, which is already imported > (by fenner, with > >additional hacks)? > > > > > > > I

Re: I would like to tcpdump and get all the packets...

2003-09-18 Thread Petri Helenius
Bruce M Simpson wrote: Er, if you check this URL: http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/tcpdump/CHANGES Shurely you mean tcpdump 3.7.2, which is already imported (by fenner, with additional hacks)? I mean libpcap, which also tcpdump uses, if I´m not mistaken. Look in contrib/libpca

Re: I would like to tcpdump and get all the packets...

2003-09-18 Thread Bruce M Simpson
On Thu, Sep 18, 2003 at 11:59:21PM +0300, Petri Helenius wrote: > I just noticed that Bill committed fix to this bug back in February. Now > it only needs that somebody refreshes the import from 0.7 to 0.7.2. Er, if you check this URL: http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/tcpdump/CHA

Re: I would like to tcpdump and get all the packets...

2003-09-18 Thread Petri Helenius
Bruce M Simpson wrote: We should avoid applying patches on the import if we possibly can, it's Not Right. I know and I agree with that. That´s why I would like to have the tree right to avoid patching it locally. Same problem, different leg. I'd suggest submitting a patch via Sourceforge. I d

Re: Traffic analysis ports?

2003-09-18 Thread Robert Watson
On Thu, 18 Sep 2003, Josef Karthauser wrote: > I'm looking for some software to basically analyse the traffic I've got > going over a particular pipe so that I can work out whether or what to > traffic shape. Can anyone recommend anything? I tend to cut my own BPF-based tools as needed to meas

Re: I would like to tcpdump and get all the packets...

2003-09-18 Thread Bruce M Simpson
On Thu, Sep 18, 2003 at 09:14:46AM +0300, Petri Helenius wrote: > Sure, but because the bug in pcap-bpf.c there is no way to set the > buffer above 32768 > without recompiling the library after applying the patch. > > This bug should be fixed in the FreeBSD copy of libpcap because tcpdump > folk

Re: I would like to tcpdump and get all the packets...

2003-09-18 Thread Lars Eggert
Michael Sierchio wrote: The time it takes to resolve host names, probably, and the additional burden of writing the service names, where known, etc. Try tcpdump -vvv -n or tcpdump -vvv -ln Or try a binary dump straight into a file, and analyze it offline. Lars -- Lars Eggert <[EMAIL PROTECTED]

Re: I would like to tcpdump and get all the packets...

2003-09-18 Thread Michael Sierchio
Josh Brooks wrote: Whenever I run: tcpdump -vvv when I am finished, I am surprised to see: 27441 packets received by filter 7866 packets dropped by kernel The time it takes to resolve host names, probably, and the additional burden of writing the service names, where known, etc. Try tcpdump -vv

Re: Traffic analysis ports?

2003-09-18 Thread Marc G. Fournier
best I've found so far is ipaudit ... On Thu, 18 Sep 2003, Josef Karthauser wrote: > Dear all, > > I'm looking for some software to basically analyse the traffic I've got > going over a particular pipe so that I can work out whether or what to > traffic shape. Can anyone recommend anything? >

Re: Traffic analysis ports?

2003-09-18 Thread Roger 'Rocky' Vetterberg
Josef Karthauser wrote: Dear all, I'm looking for some software to basically analyse the traffic I've got going over a particular pipe so that I can work out whether or what to traffic shape. Can anyone recommend anything? Joe My first recommendation would be to not reply to existing postings wh

Traffic analysis ports?

2003-09-18 Thread Josef Karthauser
Dear all, I'm looking for some software to basically analyse the traffic I've got going over a particular pipe so that I can work out whether or what to traffic shape. Can anyone recommend anything? Joe -- Josef Karthauser ([EMAIL PROTECTED]) http://www.josef-k.net/ FreeBSD (cvs meist