diff options
author | guy <guy@f5534014-38df-0310-8fa8-9805f1628bb7> | 2010-05-08 00:39:07 +0000 |
---|---|---|
committer | guy <guy@f5534014-38df-0310-8fa8-9805f1628bb7> | 2010-05-08 00:39:07 +0000 |
commit | c7385497860d14de5a250f1ff619648e5c362812 (patch) | |
tree | e1ada74787526508db85b33be7eaec1c74e2bcdc | |
parent | 896bf468f0fb638037dde0ee7ba31ea3c5d433a4 (diff) |
The default capture buffer size is, in fact, *nominally* 1MB; however,
libpcap/WinPcap and the capture mechanism atop which they run might
either silently limit the buffer size to a smaller value or raise it to
a higher value - that's the part that's platform-dependent.
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@32718 f5534014-38df-0310-8fa8-9805f1628bb7
-rw-r--r-- | doc/dumpcap.pod | 11 | ||||
-rw-r--r-- | doc/tshark.pod | 11 | ||||
-rw-r--r-- | dumpcap.c | 2 | ||||
-rw-r--r-- | gtk/main.c | 2 | ||||
-rw-r--r-- | tshark.c | 2 |
5 files changed, 17 insertions, 11 deletions
diff --git a/doc/dumpcap.pod b/doc/dumpcap.pod index f08bd66488..64cde86c15 100644 --- a/doc/dumpcap.pod +++ b/doc/dumpcap.pod @@ -100,10 +100,13 @@ to specify two criterion, each must be preceded by the B<-b> option. =item -B E<lt>capture buffer sizeE<gt> -Set capture buffer size (in MB; default is platform-dependent). This is -used by the the capture driver to buffer packet data until that data can -be written to disk. If you encounter packet drops while capturing, try -to increase this size. +Set capture buffer size (in MB, default is 1MB). This is used by the +the capture driver to buffer packet data until that data can be written +to disk. If you encounter packet drops while capturing, try to increase +this size. Note that, while B<Dumpcap> attempts to set the buffer size +to 1MB by default, and can be told to set it to a larger value, the +system or interface on which you're capturing might silently limit the +capture buffer size to a lower value or raise it to a higher value. This is available on on UNIX systems with libpcap 1.0.0 or later and on Windows. It is not available on UNIX systems with earlier versions of diff --git a/doc/tshark.pod b/doc/tshark.pod index 01dc1ec46f..5b57653cb5 100644 --- a/doc/tshark.pod +++ b/doc/tshark.pod @@ -181,10 +181,13 @@ to specify two criterion, each must be preceded by the B<-b> option. =item -B E<lt>capture buffer sizeE<gt> -Set capture buffer size (in MB; default is platform-dependent). This is -used by the the capture driver to buffer packet data until that data can -be written to disk. If you encounter packet drops while capturing, try -to increase this size. +Set capture buffer size (in MB, default is 1MB). This is used by the +the capture driver to buffer packet data until that data can be written +to disk. If you encounter packet drops while capturing, try to increase +this size. Note that, while B<Tshark> attempts to set the buffer size +to 1MB by default, and can be told to set it to a larger value, the +system or interface on which you're capturing might silently limit the +capture buffer size to a lower value or raise it to a higher value. This is available on on UNIX systems with libpcap 1.0.0 or later and on Windows. It is not available on UNIX systems with earlier versions of @@ -331,7 +331,7 @@ print_usage(gboolean print_ver) { fprintf(output, " -I capture in monitor mode, if available\n"); #endif #if defined(_WIN32) || defined(HAVE_PCAP_CREATE) - fprintf(output, " -B <buffer size> size of kernel buffer (def: platform-dependent)\n"); + fprintf(output, " -B <buffer size> size of kernel buffer (def: 1MB)\n"); #endif fprintf(output, " -y <link type> link layer type (def: first appropriate)\n"); fprintf(output, " -D print list of interfaces and exit\n"); diff --git a/gtk/main.c b/gtk/main.c index 832556c617..d983f13a6a 100644 --- a/gtk/main.c +++ b/gtk/main.c @@ -1164,7 +1164,7 @@ print_usage(gboolean print_ver) { fprintf(output, " -S update packet display when new packets are captured\n"); fprintf(output, " -l turn on automatic scrolling while -S is in use\n"); #if defined(_WIN32) || defined(HAVE_PCAP_CREATE) - fprintf(output, " -B <buffer size> size of kernel buffer (def: platform-dependent)\n"); + fprintf(output, " -B <buffer size> size of kernel buffer (def: 1MB)\n"); #endif fprintf(output, " -y <link type> link layer type (def: first appropriate)\n"); fprintf(output, " -D print list of interfaces and exit\n"); @@ -238,7 +238,7 @@ print_usage(gboolean print_ver) fprintf(output, " -I capture in monitor mode, if available\n"); #endif #if defined(_WIN32) || defined(HAVE_PCAP_CREATE) - fprintf(output, " -B <buffer size> size of kernel buffer (def: platform-dependent)\n"); + fprintf(output, " -B <buffer size> size of kernel buffer (def: 1MB)\n"); #endif fprintf(output, " -y <link type> link layer type (def: first appropriate)\n"); fprintf(output, " -D print list of interfaces and exit\n"); |